libsmbclient and smb_opendir: problem with workgroup

Andreas andreas at conectiva.com.br
Mon Jun 14 16:56:22 GMT 2004


On Fri, Jun 11, 2004 at 05:33:10PM -0700, Richard Sharpe wrote:
> Could you get a network capture of what happens when you try to access
> "smb:://"?

The test program I used:

#include <libsmbclient.h> 
#include <stdio.h>
#include <linux/errno.h>
void auth_smbc_get_data(const char *server,const char *share,
		   char *workgroup, int wgmaxlen,
		   char *username, int unmaxlen,
		   char *password, int pwmaxlen)
{
	printf("Do nothing\n");
}

int main(void)
{
   int dirfd,initst;
   struct smbc_dirent  *dirp = NULL;

   initst = smbc_init(auth_smbc_get_data,1);
   printf("Init result: %d\n",initst);
   printf("Calling smbc_opendir(\"smb://\")\n");
   dirfd = smbc_opendir( "smb://" );
   printf("smbc_opendir() result: dirfd=%d\n", dirfd);
   return 0;
}

First run:
- /etc/samba/smb.conf has "workgroup=MYGROUP", and is not running
- no ~/.smb/smb.conf file
- /etc/samba/lmhosts has "10.0.4.149 duckman"
[andreas at pandora andreas]$ ./test
params.c:OpenConfFile() - Unable to open configuration file "/home/andreas/.smb/smb.conf":
No such file or directory
Using netbios name PANDORA.
Using workgroup MYGROUP.
Init result: 0
Calling smbc_opendir("smb://")
Do nothing <---- (a long time here, about 20s I guess)
smbc_opendir() result: dirfd=-1  <--------- uh oh

Output from tethereal:
  1   0.000000   10.0.2.177 -> 10.0.7.255   NBNS Name query NB MYGROUP<1d>
  2   0.000571   10.0.4.149 -> 10.0.2.177   NBNS Name query response NB 10.0.4.149
  3   0.269830   10.0.2.177 -> 10.0.4.149   NBNS Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
  4   0.270569   10.0.4.149 -> 10.0.2.177   NBNS Name query response NBSTAT
  5   0.270997   10.0.2.177 -> 10.0.4.149   TCP 43989 > 139 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051616039 TSER=0 WS=0
  6   0.271179   10.0.4.149 -> 10.0.2.177   TCP 139 > 43989 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151461813 TSER=1051616039 WS=0
  7   0.271196   10.0.2.177 -> 10.0.4.149   TCP 43989 > 139 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=1051616039 TSER=4151461813
  8   0.281775   10.0.2.177 -> 10.0.4.149   NBSS Session request, to DUCKMAN<20> from PANDORA<00>
  9   0.482694   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 10   0.884630   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 11   1.688525   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 12   3.296281   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 13   4.162616   10.0.4.149 -> 10.0.2.177   TCP 139 > 43989 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151465705 TSER=1051619065 WS=0
 14   4.162654   10.0.2.177 -> 10.0.4.149   TCP 43989 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051619931 TSER=4151465705 SLE=1673869154 SRE=1673869155
 15   6.511792   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 16  10.162510   10.0.4.149 -> 10.0.2.177   TCP 139 > 43989 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151471705 TSER=1051622281 WS=0
 17  10.162547   10.0.2.177 -> 10.0.4.149   TCP 43989 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051625932 TSER=4151471705 SLE=1673869154 SRE=1673869155
 18  12.942808   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 19  19.993129   10.0.2.125 -> 10.0.7.255   NBNS Name query NB CONECTIVA<1d>
 20  20.278710   10.0.2.177 -> 10.0.4.149   TCP 43989 > 139 [FIN, ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051636050 TSER=4151471705
 21  20.279072   10.0.2.177 -> 10.0.4.149   TCP 43990 > 139 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051636050 TSER=0 WS=0
 22  20.279233   10.0.4.149 -> 10.0.2.177   TCP 139 > 43990 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151481821 TSER=1051636050 WS=0
 23  20.279251   10.0.2.177 -> 10.0.4.149   TCP 43990 > 139 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=1051636050 TSER=4151481821
 24  20.289737   10.0.2.177 -> 10.0.4.149   NBSS Session request, to *SMBSERVER<20> from PANDORA<00>
 25  20.490651   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 26  20.892590   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 27  21.696485   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 28  22.162301   10.0.4.149 -> 10.0.2.177   TCP 139 > 43989 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151483705 TSER=1051628713 WS=0
 29  22.162318   10.0.2.177 -> 10.0.4.149   TCP 43989 > 139 [ACK] Seq=74 Ack=1 Win=5840 Len=0 TSV=1051637933 TSER=4151483705 SLE=1673869154 SRE=1673869155
 30  23.304226   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 31  23.962268   10.0.4.149 -> 10.0.2.177   TCP 139 > 43990 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151485505 TSER=1051639076 WS=0
 32  23.962282   10.0.2.177 -> 10.0.4.149   TCP 43990 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051639734 TSER=4151485505 SLE=1695230839 SRE=1695230840
 33  25.804854   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 34  26.519734   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 35  29.962165   10.0.4.149 -> 10.0.2.177   TCP 139 > 43990 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151491505 TSER=1051642292 WS=0
 36  29.962208   10.0.2.177 -> 10.0.4.149   TCP 43990 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051645734 TSER=4151491505 SLE=1695230839 SRE=1695230840
 37  32.950765   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 38  40.286665   10.0.2.177 -> 10.0.4.149   TCP 43990 > 139 [FIN, ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051656061 TSER=4151491505

Now with an emtpy ~/.smb/smb.conf file. the rest is the same regarding configuration files
and machine state:
(Note: there is no WORKGROUP workgroup in this network.)
[andreas at pandora andreas]$ ./test
Using netbios name PANDORA.
Using workgroup WORKGROUP.  <--- default workgroup if none specified, I guess
Init result: 0
Calling smbc_opendir("smb://") <---- long time here (I guess those 10s mentioned in the next line)
session request to 10.0.4.149 failed (Call timed out: server did not respond after 10000 milliseconds)
session request to *SMBSERVER failed (Call timed out: server did not respond after 10000 milliseconds)
session request to DUCKMAN failed (Call timed out: server did not respond after 10000 milliseconds)
session request to *SMBSERVER failed (Call timed out: server did not respond after 10000 milliseconds)
Do nothing
smbc_opendir() result: dirfd=10000 <--- smbc_opendir() worked this time

tethereal's output is much bigger this time, over 140 packets, I'll post the first part. If more is needed,
please tell me. It eventually gives up on duckman and moves on to the other servers/groups (packets 89 and 90):
  1   0.000000   10.0.2.177 -> 10.0.7.255   NBNS Name query NB WORKGROUP<1d>
  2   0.270109   10.0.2.177 -> 10.0.7.255   NBNS Name query NB WORKGROUP<1d>
  3   0.540051   10.0.2.177 -> 10.0.7.255   NBNS Name query NB WORKGROUP<1d>
  4   0.810107   10.0.2.177 -> 10.0.7.255   NBNS Name query NB WORKGROUP<1b>
  5   1.079969   10.0.2.177 -> 10.0.7.255   NBNS Name query NB WORKGROUP<1b>
  6   1.349927   10.0.2.177 -> 10.0.7.255   NBNS Name query NB WORKGROUP<1b>
  7   1.619911   10.0.2.177 -> 10.0.7.255   NBNS Name query NB <01><02>__MSBROWSE__<02><01>
  8   1.620325     10.0.0.6 -> 10.0.2.177   NBNS Name query response NB 10.0.0.6
  9   1.620410   10.0.4.149 -> 10.0.2.177   NBNS Name query response NB 10.0.4.149
 10   1.620545    10.0.3.11 -> 10.0.2.177   NBNS Name query response NB 10.0.3.11
 11   1.620684   10.0.4.142 -> 10.0.2.177   NBNS Name query response NB 10.0.4.142
 12   1.889879   10.0.2.177 -> 10.0.4.149   NBNS Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
 13   1.890606   10.0.4.149 -> 10.0.2.177   NBNS Name query response NBSTAT
 14   1.890715   10.0.2.177 -> 10.0.7.255   NBNS Name query NB MYGROUP<1d>
 15   1.890990   10.0.4.149 -> 10.0.2.177   NBNS Name query response NB 10.0.4.149
 16   2.161171   10.0.2.177 -> 10.0.4.149   TCP 43991 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051767613 TSER=0 WS=0
 17   2.161323   10.0.4.149 -> 10.0.2.177   TCP 445 > 43991 [RST, ACK] Seq=0 Ack=0 Win=0 Len=0
 18   2.171782   10.0.2.177 -> 10.0.4.149   TCP 43992 > 139 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051767624 TSER=0 WS=0
 19   2.171936   10.0.4.149 -> 10.0.2.177   TCP 139 > 43992 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151613377 TSER=1051767624 WS=0
 20   2.171950   10.0.2.177 -> 10.0.4.149   TCP 43992 > 139 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=1051767624 TSER=4151613377
 21   2.182843   10.0.2.177 -> 10.0.4.149   NBSS Session request, to 10.0.4.149<20> from PANDORA<00>
 22   2.383733   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to 10.0.4.149<20> from PANDORA<00>
 23   2.785669   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to 10.0.4.149<20> from PANDORA<00>
 24   3.589555   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to 10.0.4.149<20> from PANDORA<00>
 25   5.197307   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to 10.0.4.149<20> from PANDORA<00>
 26   6.499047   10.0.4.149 -> 10.0.2.177   TCP 139 > 43992 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151617705 TSER=1051770650 WS=0
 27   6.499070   10.0.2.177 -> 10.0.4.149   TCP 43992 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051771951 TSER=4151617705 SLE=1824746216 SRE=1824746217
 28   7.111862   10.0.4.142 -> 10.0.7.255   BROWSER Domain/Workgroup Announcement DISTRO, Domain Controller, NT Workstation, Domain Enum
 29   8.412824   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to 10.0.4.149<20> from PANDORA<00>
 30  12.181274   10.0.2.177 -> 10.0.4.149   TCP 43992 > 139 [FIN, ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051777635 TSER=4151617705
 31  12.181379   10.0.2.177 -> 10.0.4.149   TCP 43993 > 139 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051777635 TSER=0 WS=0
 32  12.181542   10.0.4.149 -> 10.0.2.177   TCP 139 > 43993 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151623387 TSER=1051777635 WS=0
 33  12.181561   10.0.2.177 -> 10.0.4.149   TCP 43993 > 139 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=1051777635 TSER=4151623387
 34  12.192297   10.0.2.177 -> 10.0.4.149   NBSS Session request, to *SMBSERVER<20> from PANDORA<00>
 35  12.393216   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 36  12.698930   10.0.4.149 -> 10.0.2.177   TCP 139 > 43992 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151623905 TSER=1051773866 WS=0
 37  12.698949   10.0.2.177 -> 10.0.4.149   TCP 43992 > 139 [ACK] Seq=74 Ack=1 Win=5840 Len=0 TSV=1051778152 TSER=4151623905 SLE=1824746216 SRE=1824746217
 38  12.795146   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 39  13.599025   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 40  14.843854   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to 10.0.4.149<20> from PANDORA<00>
 41  15.206780   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 42  16.498870   10.0.4.149 -> 10.0.2.177   TCP 139 > 43993 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151627705 TSER=1051780661 WS=0
 43  16.498901   10.0.2.177 -> 10.0.4.149   TCP 43993 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051781953 TSER=4151627705 SLE=1836048142 SRE=1836048143

 45  18.422294   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 46  22.190740   10.0.2.177 -> 10.0.4.149   TCP 43993 > 139 [FIN, ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051787646 TSER=4151627705
 47  22.190856   10.0.2.177 -> 10.0.4.149   NBNS Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
 48  22.191582   10.0.4.149 -> 10.0.2.177   NBNS Name query response NBSTAT
 49  22.191748   10.0.4.149 -> 10.0.7.255   BROWSER Local Master Announcement DUCKMAN, Workstation, Server, Print Queue Server, Xenix Server, NT Workstation, NT
 Server, Master Browser
 50  22.191830   10.0.4.149 -> 10.0.7.255   BROWSER Domain/Workgroup Announcement MYGROUP, NT Workstation, Domain Enum
 51  22.191957   10.0.2.177 -> 10.0.4.149   TCP 43994 > 445 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051787647 TSER=0 WS=0
 52  22.192094   10.0.4.149 -> 10.0.2.177   TCP 445 > 43994 [RST, ACK] Seq=0 Ack=0 Win=0 Len=0
 53  22.203163   10.0.2.177 -> 10.0.4.149   TCP 43995 > 139 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051787658 TSER=0 WS=0
 54  22.203339   10.0.4.149 -> 10.0.2.177   TCP 139 > 43995 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151633409 TSER=1051787658 WS=0
 55  22.203354   10.0.2.177 -> 10.0.4.149   TCP 43995 > 139 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=1051787658 TSER=4151633409
 56  22.213752   10.0.2.177 -> 10.0.4.149   NBSS Session request, to DUCKMAN<20> from PANDORA<00>
 57  22.414686   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 58  22.698762   10.0.4.149 -> 10.0.2.177   TCP 139 > 43993 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151633905 TSER=1051783877 WS=0
 59  22.698777   10.0.2.177 -> 10.0.4.149   TCP 43993 > 139 [ACK] Seq=74 Ack=1 Win=5840 Len=0 TSV=1051788154 TSER=4151633905 SLE=1836048142 SRE=1836048143
 60  22.816622   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 61  23.620510   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 62  24.698722   10.0.4.149 -> 10.0.2.177   TCP 139 > 43992 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151635905 TSER=1051780298 WS=0
 63  24.698755   10.0.2.177 -> 10.0.4.149   TCP 43992 > 139 [ACK] Seq=74 Ack=1 Win=5840 Len=0 TSV=1051790154 TSER=4151635905 SLE=1824746216 SRE=1824746217
 64  24.853317   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 65  25.228257   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 66  26.298691   10.0.4.149 -> 10.0.2.177   TCP 139 > 43995 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151637505 TSER=1051790684 WS=0
 67  26.298704   10.0.2.177 -> 10.0.4.149   TCP 43995 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051791754 TSER=4151637505 SLE=1852385141 SRE=1852385142
 68  27.705891   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to 10.0.4.149<20> from PANDORA<00>
 69  28.443773   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>
 70  32.212222   10.0.2.177 -> 10.0.4.149   TCP 43995 > 139 [FIN, ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051797669 TSER=4151637505
 71  32.212317   10.0.2.177 -> 10.0.4.149   TCP 43996 > 139 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1051797669 TSER=0 WS=0
 72  32.212471   10.0.4.149 -> 10.0.2.177   TCP 139 > 43996 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151643418 TSER=1051797669 WS=0
 73  32.212491   10.0.2.177 -> 10.0.4.149   TCP 43996 > 139 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=1051797669 TSER=4151643418
 74  32.223230   10.0.2.177 -> 10.0.4.149   NBSS Session request, to *SMBSERVER<20> from PANDORA<00>
 75  32.298576   10.0.4.149 -> 10.0.2.177   TCP 139 > 43995 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151643505 TSER=1051793900 WS=0
 76  32.298590   10.0.2.177 -> 10.0.4.149   TCP 43995 > 139 [ACK] Seq=74 Ack=1 Win=5840 Len=0 TSV=1051797755 TSER=4151643505 SLE=1852385141 SRE=1852385142
 77  32.424164   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 78  32.826102   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 79  33.629979   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 80  34.698545   10.0.4.149 -> 10.0.2.177   TCP 139 > 43993 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151645905 TSER=1051790309 WS=0
 81  34.698559   10.0.2.177 -> 10.0.4.149   TCP 43993 > 139 [ACK] Seq=74 Ack=1 Win=5840 Len=0 TSV=1051800155 TSER=4151645905 SLE=1836048142 SRE=1836048143
 82  34.874793   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to DUCKMAN<20> from PANDORA<00>

 84  35.237735   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 85  36.098523   10.0.4.149 -> 10.0.2.177   TCP 139 > 43996 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4151647305 TSER=1051800695 WS=0
 86  36.098550   10.0.2.177 -> 10.0.4.149   TCP 43996 > 139 [ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051801555 TSER=4151647305 SLE=1851631206 SRE=1851631207
 87  37.715373   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 88  38.453247   10.0.2.177 -> 10.0.4.149   NBSS [TCP Retransmission] Session request, to *SMBSERVER<20> from PANDORA<00>
 89  42.221701   10.0.2.177 -> 10.0.4.149   TCP 43996 > 139 [FIN, ACK] Seq=73 Ack=1 Win=5840 Len=0 TSV=1051807680 TSER=4151647305
 90  42.221825   10.0.2.177 -> 10.0.4.142   NBNS Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
 91  42.222582   10.0.4.142 -> 10.0.2.177   NBNS Name query response NBSTAT
 92  42.222762   10.0.2.177 -> 10.0.7.255   NBNS Name query NB DISTRO<1d>
 93  42.223142   10.0.4.142 -> 10.0.2.177   NBNS Name query response NB 10.0.4.142
(...)



More information about the samba-technical mailing list