[Samba] PDA-Logon: mal formed packet
Bernd Kloss
b_kloss at web.de
Thu Oct 23 08:13:59 GMT 2008
Debian Lenny
Samba 3.2.3
LOOX N560 with Windows Mobile 5
Hello,
my PDA LOOX N560 could connect via WLAN to SAMBA under Etch.
Meanwhile I upgraded to Debian Lenny and now may PDA cannot connect anymore to
the server. Error 1223 or 1222.
Connecting to XP-Clients via WLAN is okay.
Connecting to Samba Wireshark tells me:
malformed packet:
No. Time Source Destination Protocol Info
30 34.499685 10.0.0.245 10.0.0.247 SMB
Session Setup AndX Request, NTLMSSP_NEGOTIATE[Malformed Packet]
The PDA is 10.0.0.245
the server is 10.0.0.247
Any clue, what is going wrong and what to do about it?
Thank you and regards
Bernd Kloss
No. Time Source Destination Protocol Info
1 0.000000 10.0.0.248 10.0.0.247 SMB Echo
Request
Frame 1 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: GemtekTe_59:ba:87 (00:14:a5:59:ba:87), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.248 (10.0.0.248), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: polestar (1060), Dst Port:
netbios-ssn (139), Seq: 1, Ack: 1, Len: 53
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
2 0.000151 10.0.0.247 10.0.0.248 SMB Echo
Response
Frame 2 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: GemtekTe_59:ba:87
(00:14:a5:59:ba:87)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.248 (10.0.0.248)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: polestar
(1060), Seq: 1, Ack: 54, Len: 53
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
3 0.195274 10.0.0.248 10.0.0.247 TCP
polestar > netbios-ssn [ACK] Seq=54 Ack=54 Win=16936 Len=0
Frame 3 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: GemtekTe_59:ba:87 (00:14:a5:59:ba:87), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.248 (10.0.0.248), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: polestar (1060), Dst Port:
netbios-ssn (139), Seq: 54, Ack: 54, Len: 0
No. Time Source Destination Protocol Info
4 2.900967 10.0.0.245 10.0.0.255 NBNS Name
query NB 10.0.0.247<20>
Frame 4 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.255 (10.0.0.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Info
5 3.152472 10.0.0.245 10.0.0.255 NBNS Name
query NB 10.0.0.247<20>
Frame 5 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.255 (10.0.0.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Info
6 3.404525 10.0.0.245 10.0.0.255 NBNS Name
query NB 10.0.0.247<20>
Frame 6 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.255 (10.0.0.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Info
7 3.656776 10.0.0.245 10.0.0.255 NBNS Name
query NB 10.0.0.247<20>
Frame 7 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.255 (10.0.0.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Info
8 3.909886 10.0.0.245 10.0.0.255 NBNS Name
query NB 10.0.0.247<20>
Frame 8 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.255 (10.0.0.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Info
9 11.160140 10.0.0.247 213.133.98.226 NTP NTP
client
Frame 9 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: D-Link_59:96:2c
(00:1c:f0:59:96:2c)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 213.133.98.226
(213.133.98.226)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
Network Time Protocol
No. Time Source Destination Protocol Info
10 11.178686 D-Link_59:96:2c Broadcast ARP Who
has 10.0.0.247? Tell 10.0.0.251
Frame 10 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: D-Link_59:96:2c (00:1c:f0:59:96:2c), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Info
11 11.178713 3com_4e:f8:62 D-Link_59:96:2c ARP
10.0.0.247 is at 00:60:08:4e:f8:62
Frame 11 (42 bytes on wire, 42 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: D-Link_59:96:2c
(00:1c:f0:59:96:2c)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Info
12 11.178722 213.133.98.226 10.0.0.247 NTP NTP
server
Frame 12 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: D-Link_59:96:2c (00:1c:f0:59:96:2c), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 213.133.98.226 (213.133.98.226), Dst: 10.0.0.247
(10.0.0.247)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
Network Time Protocol
No. Time Source Destination Protocol Info
13 20.321355 D-Link_59:96:2c Broadcast ARP Who
has 10.0.0.248? Tell 10.0.0.251
Frame 13 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: D-Link_59:96:2c (00:1c:f0:59:96:2c), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Info
14 27.028177 10.0.0.245 10.0.0.255 NBNS Name
query NB ZEUS<20>
Frame 14 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.255 (10.0.0.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Info
15 27.029077 3com_4e:f8:62 Broadcast ARP Who
has 10.0.0.245? Tell 10.0.0.247
Frame 15 (42 bytes on wire, 42 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Info
16 27.032382 FujitsuS_b6:03:43 3com_4e:f8:62 ARP
10.0.0.245 is at 00:30:05:b6:03:43
Frame 16 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Info
17 27.032412 10.0.0.247 10.0.0.245 NBNS Name
query response NB 10.0.0.247
Frame 17 (104 bytes on wire, 104 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: FujitsuS_b6:03:43
(00:30:05:b6:03:43)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.245 (10.0.0.245)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Info
18 27.036160 10.0.0.245 10.0.0.247 TCP
netinfo-local > netbios-ssn [SYN] Seq=0 Win=32768 Len=0 MSS=1460
Frame 18 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
19 27.036215 10.0.0.247 10.0.0.245 TCP
netbios-ssn > netinfo-local [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
Frame 19 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: FujitsuS_b6:03:43
(00:30:05:b6:03:43)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.245 (10.0.0.245)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port:
netinfo-local (1033), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
20 27.038815 10.0.0.245 10.0.0.247 TCP
netinfo-local > netbios-ssn [ACK] Seq=1 Ack=1 Win=33580 Len=0
Frame 20 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
21 27.040613 10.0.0.245 10.0.0.247 NBSS
Session request, to ZEUS<20> from _CERDR3427D415<00>
Frame 21 (126 bytes on wire, 126 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 1, Ack: 1, Len: 72
NetBIOS Session Service
No. Time Source Destination Protocol Info
22 27.040660 10.0.0.247 10.0.0.245 TCP
netbios-ssn > netinfo-local [ACK] Seq=1 Ack=73 Win=5840 Len=0
Frame 22 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: FujitsuS_b6:03:43
(00:30:05:b6:03:43)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.245 (10.0.0.245)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port:
netinfo-local (1033), Seq: 1, Ack: 73, Len: 0
No. Time Source Destination Protocol Info
23 27.045900 10.0.0.247 10.0.0.245 NBSS
Positive session response
Frame 23 (58 bytes on wire, 58 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: FujitsuS_b6:03:43
(00:30:05:b6:03:43)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.245 (10.0.0.245)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port:
netinfo-local (1033), Seq: 1, Ack: 73, Len: 4
NetBIOS Session Service
No. Time Source Destination Protocol Info
24 27.048925 10.0.0.245 10.0.0.247 SMB
Negotiate Protocol Request
Frame 24 (105 bytes on wire, 105 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 73, Ack: 5, Len: 51
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
25 27.049716 10.0.0.247 10.0.0.245 SMB
Negotiate Protocol Response
Frame 25 (185 bytes on wire, 185 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: FujitsuS_b6:03:43
(00:30:05:b6:03:43)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.245 (10.0.0.245)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port:
netinfo-local (1033), Seq: 5, Ack: 124, Len: 131
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
26 27.238972 10.0.0.245 10.0.0.247 TCP
netinfo-local > netbios-ssn [ACK] Seq=124 Ack=136 Win=33445 Len=0
Frame 26 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 124, Ack: 136, Len: 0
No. Time Source Destination Protocol Info
27 31.993031 10.0.0.248 10.0.0.247 SMB Echo
Request
Frame 27 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: GemtekTe_59:ba:87 (00:14:a5:59:ba:87), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.248 (10.0.0.248), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: polestar (1060), Dst Port:
netbios-ssn (139), Seq: 54, Ack: 54, Len: 53
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
28 31.993169 10.0.0.247 10.0.0.248 SMB Echo
Response
Frame 28 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: GemtekTe_59:ba:87
(00:14:a5:59:ba:87)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.248 (10.0.0.248)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: polestar
(1060), Seq: 54, Ack: 107, Len: 53
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
29 32.188298 10.0.0.248 10.0.0.247 TCP
polestar > netbios-ssn [ACK] Seq=107 Ack=107 Win=16883 Len=0
Frame 29 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: GemtekTe_59:ba:87 (00:14:a5:59:ba:87), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.248 (10.0.0.248), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: polestar (1060), Dst Port:
netbios-ssn (139), Seq: 107, Ack: 107, Len: 0
No. Time Source Destination Protocol Info
30 34.499685 10.0.0.245 10.0.0.247 SMB
Session Setup AndX Request, NTLMSSP_NEGOTIATE[Malformed Packet]
Frame 30 (228 bytes on wire, 228 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 124, Ack: 136, Len: 174
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
31 34.500705 10.0.0.247 10.0.0.245 SMB
Session Setup AndX Response, NTLMSSP_CHALLENGE, Error:
STATUS_MORE_PROCESSING_REQUIRED
Frame 31 (226 bytes on wire, 226 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: FujitsuS_b6:03:43
(00:30:05:b6:03:43)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.245 (10.0.0.245)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port:
netinfo-local (1033), Seq: 136, Ack: 298, Len: 172
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
32 34.616045 10.0.0.245 10.0.0.247 SMB
Session Setup AndX Request, NTLMSSP_AUTH, User: azimmer\bk
Frame 32 (282 bytes on wire, 282 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 298, Ack: 308, Len: 228
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
33 34.616625 10.0.0.247 10.0.0.245 SMB
Session Setup AndX Response, Error: STATUS_LOGON_FAILURE
Frame 33 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: FujitsuS_b6:03:43
(00:30:05:b6:03:43)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 10.0.0.245 (10.0.0.245)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port:
netinfo-local (1033), Seq: 308, Ack: 526, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
34 34.817215 10.0.0.245 10.0.0.247 TCP
netinfo-local > netbios-ssn [ACK] Seq=526 Ack=347 Win=33234 Len=0
Frame 34 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: FujitsuS_b6:03:43 (00:30:05:b6:03:43), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 10.0.0.245 (10.0.0.245), Dst: 10.0.0.247 (10.0.0.247)
Transmission Control Protocol, Src Port: netinfo-local (1033), Dst Port:
netbios-ssn (139), Seq: 526, Ack: 347, Len: 0
No. Time Source Destination Protocol Info
35 39.160177 10.0.0.247 141.40.103.102 NTP NTP
client
Frame 35 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: 3com_4e:f8:62 (00:60:08:4e:f8:62), Dst: D-Link_59:96:2c
(00:1c:f0:59:96:2c)
Internet Protocol, Src: 10.0.0.247 (10.0.0.247), Dst: 141.40.103.102
(141.40.103.102)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
Network Time Protocol
No. Time Source Destination Protocol Info
36 39.182284 141.40.103.102 10.0.0.247 NTP NTP
server
Frame 36 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: D-Link_59:96:2c (00:1c:f0:59:96:2c), Dst: 3com_4e:f8:62
(00:60:08:4e:f8:62)
Internet Protocol, Src: 141.40.103.102 (141.40.103.102), Dst: 10.0.0.247
(10.0.0.247)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
Network Time Protocol
More information about the samba
mailing list