Win2k -> Samba 2.2.2 for IRIX

[Jeremy Allison]

On Thu, Dec 20, 2001 at 01:26:45PM -0600, Carrie Knox wrote:
> 
> It looks like Rst packets are coming from the Win2k client when the connection
> fails....
> 
>  cfdhcp-87-3 -> cf3backup    TCP D=445 S=2143 Syn Seq=4203875683 Len=0 Win=16384
> 
>    cf3backup -> cfdhcp-87-3  TCP D=2143 S=445 Syn Ack=4203875684 Seq=1870848568
> Len=0 Win=49152
>  cfdhcp-87-3 -> cf3backup    TCP D=445 S=2143     Ack=1870848569 Seq=4203875684
> Len=0 Win=17520
>  cfdhcp-87-3 -> cf3backup    TCP D=139 S=2145 Rst Seq=4203813412 Len=0 Win=0

Yes, this packet is the client dropping the connection on port 139 via a RST.
It occurs just after the TCP 3 way handshake to open a connection to c3fbackup on port 445.

What process is is listening on port 445 on this machine ? This is not Samba....

445 is the "new" SMB port used by Win2k.

Jeremy.