======================= === Mint === ======================= |Time | 172.16.40.132 | 10.3.11.49 | | | | 10.3.11.50 | | 10.3.15.157 | |6.848613 | Negotiate Protocol R | | |SMB: Negotiate Protocol Request | |(47865) ------------------> (445) | | | |6.849529 | Negotiate Protocol R | | |SMB: Negotiate Protocol Response | |(47865) <------------------ (445) | | | |6.849721 | Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(47865) ------------------> (445) | | | |6.850614 | Session Setup AndX R | | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(47865) <------------------ (445) | | | |6.850829 | Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: example\netbiosname | |(47865) ------------------> (445) | | | |6.858505 | Session Setup AndX R | | |SMB: Session Setup AndX Response | |(47865) <------------------ (445) | | | |6.858730 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\example.com\dir1 | |(47865) ------------------> (445) | | | |6.859701 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Response | |(47865) <------------------ (445) | | | |6.859867 | Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(47865) ------------------> (445) | | | |6.860695 | Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO | |(47865) <------------------ (445) | | | |6.860872 | Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(47865) ------------------> (445) | | | |6.861769 | Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO | |(47865) <------------------ (445) | | | |6.861983 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\10.3.11.50\IPC$ | |(47865) ------------------> (445) | | | |6.862666 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Response | |(47865) <------------------ (445) | | | |6.862895 | Trans2 Request, GET_ | | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \example.com\dir1 | |(47865) ------------------> (445) | | | |6.863890 | Trans2 Response, GET | | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(47865) <------------------ (445) | | | |6.864118 | Tree Disconnect Requ | | |SMB: Tree Disconnect Request | |(47865) ------------------> (445) | | | |6.864915 | Tree Disconnect Resp | | |SMB: Tree Disconnect Response | |(47865) <------------------ (445) | | | |6.865099 | Logoff AndX Request | | |SMB: Logoff AndX Request | |(47865) ------------------> (445) | | | |6.865760 | Logoff AndX Response | | |SMB: Logoff AndX Response | |(47865) <------------------ (445) | | | |6.867469 | Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(58683) --------------------------------------> (445) | | |6.868581 | Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(58683) <-------------------------------------- (445) | | |6.868850 | Session Setup AndX Request, NTLMSSP_NEGO | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(58683) --------------------------------------> (445) | | |6.869746 | Session Setup AndX Response, NTLMSSP_CHA | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(58683) <-------------------------------------- (445) | | |6.869983 | Session Setup AndX Request, NTLMSSP_AUTH | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: example\netbiosname | |(58683) --------------------------------------> (445) | | |6.872256 | Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(58683) <-------------------------------------- (445) | | |6.872428 | Tree Connect AndX Request, Path: \\WDC2\d | |SMB: Tree Connect AndX Request, Path: \\WDC2\dir1 | |(58683) --------------------------------------> (445) | | |6.873308 | Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(58683) <-------------------------------------- (445) | | |6.873413 | Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(58683) --------------------------------------> (445) | | |6.874057 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(58683) <-------------------------------------- (445) | | |6.874251 | Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(58683) --------------------------------------> (445) | | |6.875503 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(58683) <-------------------------------------- (445) | | |6.875678 | Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC2\dir1\\dir2\dir3 | |(58683) --------------------------------------> (445) | | |6.876429 | Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(58683) <-------------------------------------- (445) | | |6.876503 | Tree Connect AndX Request, Path: \\10.3. | |SMB: Tree Connect AndX Request, Path: \\10.3.11.49\IPC$ | |(58683) --------------------------------------> (445) | | |6.877080 | Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(58683) <-------------------------------------- (445) | | |6.877247 | Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC2\dir1\\dir2\dir3 | |(58683) --------------------------------------> (445) | | |6.878027 | Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(58683) <-------------------------------------- (445) | | |6.878277 | Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(58683) --------------------------------------> (445) | | |6.879035 | Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(58683) <-------------------------------------- (445) | | |6.879202 | Logoff AndX Request | | |SMB: Logoff AndX Request | |(58683) --------------------------------------> (445) | | |6.879993 | Logoff AndX Response | | |SMB: Logoff AndX Response | |(58683) <-------------------------------------- (445) | | |6.881637 | Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(56574) ----------------------------------------------------------> (445) | |6.882770 | Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(56574) <---------------------------------------------------------- (445) | |6.882997 | Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(56574) ----------------------------------------------------------> (445) | |6.883996 | Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(56574) <---------------------------------------------------------- (445) | |6.884211 | Session Setup AndX Request, NTLMSSP_AUTH, User: example\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: example\netbiosname | |(56574) ----------------------------------------------------------> (445) | |6.889212 | Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(56574) <---------------------------------------------------------- (445) | |6.889419 | Tree Connect AndX Request, Path: \\dfs2\dir0 | |SMB: Tree Connect AndX Request, Path: \\dfs2\dir0 | |(56574) ----------------------------------------------------------> (445) | |6.890070 | Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(56574) <---------------------------------------------------------- (445) | |6.890296 | Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(56574) ----------------------------------------------------------> (445) | |6.890975 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(56574) <---------------------------------------------------------- (445) | |6.891175 | Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(56574) ----------------------------------------------------------> (445) | |6.892361 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(56574) <---------------------------------------------------------- (445) | |6.892480 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3 | |(56574) ----------------------------------------------------------> (445) | |6.893630 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(56574) <---------------------------------------------------------- (445) | |6.893836 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: | |(56574) ----------------------------------------------------------> (445) | |6.894686 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(56574) <---------------------------------------------------------- (445) | |6.894890 | Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, P |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: | |(56574) ----------------------------------------------------------> (445) | |6.895808 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(56574) <---------------------------------------------------------- (445) | |6.895997 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3 | |(56574) ----------------------------------------------------------> (445) | |6.896784 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(56574) <---------------------------------------------------------- (445) | |6.896944 | Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, P |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \dir3 | |(56574) ----------------------------------------------------------> (445) | |6.897723 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(56574) <---------------------------------------------------------- (445) | |6.899055 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash | |(56574) ----------------------------------------------------------> (445) | |6.900152 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |6.900405 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash-1000 | |(56574) ----------------------------------------------------------> (445) | |6.901025 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |6.901688 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.902595 | Trans2 Response, FIND_FIRST2, Files: . .. list of files |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.903121 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.xdg-volume-info | |(56574) ----------------------------------------------------------> (445) | |6.904087 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |6.904291 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\autorun.inf | |(56574) ----------------------------------------------------------> (445) | |6.904991 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |6.905148 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.906017 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.906174 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.907515 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.907748 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.908802 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.909026 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.910000 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.910432 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.911267 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.911728 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.913807 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.914200 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.915233 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.915608 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.916387 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.916583 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.917200 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.917520 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.918160 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.918525 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.919180 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.919521 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.920409 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.920675 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.921471 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.921822 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.922707 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.923009 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.923705 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.924000 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.924812 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.925129 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.925968 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.926401 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.927468 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.927859 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.928741 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.929114 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.930076 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |6.932009 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |6.933072 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |13.615642| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3 | |(56574) ----------------------------------------------------------> (445) | |13.616978| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(56574) <---------------------------------------------------------- (445) | |13.669257| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.hidden | |(56574) ----------------------------------------------------------> (445) | |13.670341| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.670896| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash | |(56574) ----------------------------------------------------------> (445) | |13.671653| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.671720| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash-1000 | |(56574) ----------------------------------------------------------> (445) | |13.672430| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.672493| Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* | |(56574) ----------------------------------------------------------> (445) | |13.673528| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs | |(56574) <---------------------------------------------------------- (445) | |13.687043| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* | |(56574) ----------------------------------------------------------> (445) | |13.688034| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files | |(56574) <---------------------------------------------------------- (445) | |13.688194| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden | |(56574) ----------------------------------------------------------> (445) | |13.689056| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.693889| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* | |(56574) ----------------------------------------------------------> (445) | |13.694805| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files Thumbs.db | |(56574) <---------------------------------------------------------- (445) | |13.694921| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden | |(56574) ----------------------------------------------------------> (445) | |13.695821| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.696644| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* | |(56574) ----------------------------------------------------------> (445) | |13.697547| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files Thumbs.db | |(56574) <---------------------------------------------------------- (445) | |13.697918| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden | |(56574) ----------------------------------------------------------> (445) | |13.698616| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.699132| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* | |(56574) ----------------------------------------------------------> (445) | |13.699909| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files | |(56574) <---------------------------------------------------------- (445) | |13.700066| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\ips\.hidden | |(56574) ----------------------------------------------------------> (445) | |13.700725| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.701577| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* | |(56574) ----------------------------------------------------------> (445) | |13.702534| Trans2 Response, FIND_FIRST2, Error: STATUS_ACCESS_DENIED |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_ACCESS_DENIED | |(56574) <---------------------------------------------------------- (445) | |13.703532| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* | |(56574) ----------------------------------------------------------> (445) | |13.704430| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files | |(56574) <---------------------------------------------------------- (445) | |13.704610| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden | |(56574) ----------------------------------------------------------> (445) | |13.705424| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(56574) <---------------------------------------------------------- (445) | |13.780448| Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(56574) ----------------------------------------------------------> (445) | |13.781335| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(56574) <---------------------------------------------------------- (445) | |19.079166| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3 | |(56574) ----------------------------------------------------------> (445) | |19.083106| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(56574) <---------------------------------------------------------- (445) | |25.108437| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(56574) ----------------------------------------------------------> (445) | |25.109117| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(56574) <---------------------------------------------------------- (445) | |25.109245| Logoff AndX Request | | |SMB: Logoff AndX Request | |(56574) ----------------------------------------------------------> (445) | |25.109829| Logoff AndX Response | | |SMB: Logoff AndX Response | |(56574) <---------------------------------------------------------- (445) | ======================= === Manajro === ======================= |Time | 10.0.2.15 | 10.3.11.50 | | | | 10.3.11.47 | | 10.3.15.157 | |5.170270885| Negotiate Protocol R | | |SMB: Negotiate Protocol Request | |(53240) ------------------> (445) | | | |5.171330104| Negotiate Protocol R | | |SMB: Negotiate Protocol Response | |(53240) <------------------ (445) | | | |5.171733887| Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(53240) ------------------> (445) | | | |5.172833829| Session Setup AndX R | | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(53240) <------------------ (445) | | | |5.204816337| Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(53240) ------------------> (445) | | | |5.207366104| Session Setup AndX R | | |SMB: Session Setup AndX Response | |(53240) <------------------ (445) | | | |5.207467447| Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\example.com\dir1 | |(53240) ------------------> (445) | | | |5.208713120| Tree Connect AndX Re | | |SMB: Tree Connect AndX Response | |(53240) <------------------ (445) | | | |5.208848625| Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(53240) ------------------> (445) | | | |5.209857670| Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO | |(53240) <------------------ (445) | | | |5.209970652| Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(53240) ------------------> (445) | | | |5.211131420| Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO | |(53240) <------------------ (445) | | | |5.211250873| Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\10.3.11.47\IPC$ | |(53240) ------------------> (445) | | | |5.211957166| Tree Connect AndX Re | | |SMB: Tree Connect AndX Response | |(53240) <------------------ (445) | | | |5.212030861| Trans2 Request, GET_ | | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \example.com\dir1 | |(53240) ------------------> (445) | | | |5.213059093| Trans2 Response, GET | | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(53240) <------------------ (445) | | | |5.221388952| Tree Disconnect Requ | | |SMB: Tree Disconnect Request | |(53240) ------------------> (445) | | | |5.222290460| Tree Disconnect Resp | | |SMB: Tree Disconnect Response | |(53240) <------------------ (445) | | | |5.222390041| Logoff AndX Request | | |SMB: Logoff AndX Request | |(53240) ------------------> (445) | | | |5.223354643| Logoff AndX Response | | |SMB: Logoff AndX Response | |(53240) <------------------ (445) | | | |5.225068489| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(54504) --------------------------------------> (445) | | |5.225817106| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(54504) <-------------------------------------- (445) | | |5.226104092| Session Setup AndX Request, NTLMSSP_NEGO | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(54504) --------------------------------------> (445) | | |5.226903024| Session Setup AndX Response, NTLMSSP_CHA | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(54504) <-------------------------------------- (445) | | |5.227273374| Session Setup AndX Request, NTLMSSP_AUTH | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(54504) --------------------------------------> (445) | | |5.229173495| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(54504) <-------------------------------------- (445) | | |5.229381738| Tree Connect AndX Request, Path: \\WDC3\ | |SMB: Tree Connect AndX Request, Path: \\WDC3\dir1 | |(54504) --------------------------------------> (445) | | |5.230107486| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(54504) <-------------------------------------- (445) | | |5.230313889| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(54504) --------------------------------------> (445) | | |5.230974349| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |5.231178427| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(54504) --------------------------------------> (445) | | |5.232147743| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |5.232351107| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\\dir2\dir3 | |(54504) --------------------------------------> (445) | | |5.233148049| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.233307158| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: | |(54504) --------------------------------------> (445) | | |5.234258017| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(54504) <-------------------------------------- (445) | | |5.234415318| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3 | |(54504) --------------------------------------> (445) | | |5.235263122| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(54504) <-------------------------------------- (445) | | |5.235385079| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1 | |(54504) --------------------------------------> (445) | | |5.236330253| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(54504) <-------------------------------------- (445) | | |5.236542876| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\\dir2 | |(54504) --------------------------------------> (445) | | |5.237128589| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.237315294| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir2\dir3 | |(54504) --------------------------------------> (445) | | |5.237994298| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(54504) <-------------------------------------- (445) | | |5.238186359| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \dir2\dir3 | |(54504) --------------------------------------> (445) | | |5.239019148| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO | |(54504) <-------------------------------------- (445) | | |5.239765211| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |5.240397709| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.241834969| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |5.242495967| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.252786026| Tree Connect AndX Request, Path: \\10.8. | |SMB: Tree Connect AndX Request, Path: \\10.3.11.50\IPC$ | |(54504) --------------------------------------> (445) | | |5.253624754| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(54504) <-------------------------------------- (445) | | |5.255099063| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.255465223| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |5.255835763| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.256031247| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.256207278| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.256965920| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.257310765| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.257886125| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.257962080| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\AACS | |(54504) --------------------------------------> (445) | | |5.258631481| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.258761009| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\AACS | |(54504) --------------------------------------> (445) | | |5.258936124| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.xdg-volume-info | |(54504) --------------------------------------> (445) | | |5.259516420| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.259815248| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.259970845| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.xdg-volume-info | |(54504) --------------------------------------> (445) | | |5.260183889| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\autorun.inf | |(54504) --------------------------------------> (445) | | |5.260568766| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.261071046| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.261655085| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.262185888| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43074) ----------------------------------------------------------> (445) | |5.262368150| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.262823261| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43075) ----------------------------------------------------------> (445) | |5.263218050| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.263280845| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43074) <---------------------------------------------------------- (445) | |5.263747000| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43075) <---------------------------------------------------------- (445) | |5.263852407| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.263963092| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.264176762| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43075) ----------------------------------------------------------> (445) | |5.264381845| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.264575469| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43074) ----------------------------------------------------------> (445) | |5.264606557| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.264878286| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43076) ----------------------------------------------------------> (445) | |5.265010094| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43075) <---------------------------------------------------------- (445) | |5.265142201| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.265239696| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43074) <---------------------------------------------------------- (445) | |5.265355293| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43074) ----------------------------------------------------------> (445) | |5.265498728| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.265584728| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43076) <---------------------------------------------------------- (445) | |5.265880918| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43076) ----------------------------------------------------------> (445) | |5.266090316| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43075) ----------------------------------------------------------> (445) | |5.266177536| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.266403859| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.266682314| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43076) <---------------------------------------------------------- (445) | |5.266857254| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43076) ----------------------------------------------------------> (445) | |5.267013346| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.267119859| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.267593533| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.267693147| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.268190717| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.268283711| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.268787530| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.268879943| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.269493085| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.269604076| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.270199789| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.270307849| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.270877195| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.270984083| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.271422109| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43075) <---------------------------------------------------------- (445) | |5.271557680| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.271619045| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43075) ----------------------------------------------------------> (445) | |5.271775297| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43076) <---------------------------------------------------------- (445) | |5.271833006| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.271932568| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43076) ----------------------------------------------------------> (445) | |5.272220787| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43075) <---------------------------------------------------------- (445) | |5.272287284| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.272494882| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43076) <---------------------------------------------------------- (445) | |5.272557069| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.272654078| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43076) ----------------------------------------------------------> (445) | |5.272777180| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43075) ----------------------------------------------------------> (445) | |5.273208901| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.273380677| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.273403027| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43075) <---------------------------------------------------------- (445) | |5.273490658| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43076) ----------------------------------------------------------> (445) | |5.273562183| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.273583028| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43075) ----------------------------------------------------------> (445) | |5.274110040| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.274134771| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.274138041| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43075) <---------------------------------------------------------- (445) | |5.274273516| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.274333211| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43075) ----------------------------------------------------------> (445) | |5.274419863| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43076) ----------------------------------------------------------> (445) | |5.274843018| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.274999807| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.275055577| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43076) <---------------------------------------------------------- (445) | |5.275078928| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43075) <---------------------------------------------------------- (445) | |5.275134546| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43075) ----------------------------------------------------------> (445) | |5.275285575| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43076) ----------------------------------------------------------> (445) | |5.275453844| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.275601046| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |5.275707278| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43075) <---------------------------------------------------------- (445) | |5.275815033| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\AACS | |(43075) ----------------------------------------------------------> (445) | |5.276191976| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.276220259| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43076) <---------------------------------------------------------- (445) | |5.276517736| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\autorun.inf | |(54504) --------------------------------------> (445) | | |5.276591864| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43075) <---------------------------------------------------------- (445) | |5.277087172| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.277477850| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43076) ----------------------------------------------------------> (445) | |5.278167356| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.282226063| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43075) ----------------------------------------------------------> (445) | |5.282312893| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43076) ----------------------------------------------------------> (445) | |5.282476215| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43076) ----------------------------------------------------------> (445) | |5.282851666| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43075) <---------------------------------------------------------- (445) | |5.282916899| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43075) ----------------------------------------------------------> (445) | |5.282954927| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43076) <---------------------------------------------------------- (445) | |5.283380522| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.283628036| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43075) <---------------------------------------------------------- (445) | |5.283834996| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43076) ----------------------------------------------------------> (445) | |5.284199710| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |5.284407337| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\BDSVM | |(54504) --------------------------------------> (445) | | |5.284441855| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43076) <---------------------------------------------------------- (445) | |5.284624748| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\autorun.inf | |(43076) ----------------------------------------------------------> (445) | |5.284705113| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.285094232| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.285226116| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43076) <---------------------------------------------------------- (445) | |5.285448150| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43076) ----------------------------------------------------------> (445) | |5.285515522| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\BDSVM | |(54504) --------------------------------------> (445) | | |5.285653542| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43076) ----------------------------------------------------------> (445) | |5.285975792| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43076) <---------------------------------------------------------- (445) | |5.286053406| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.286263482| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43076) ----------------------------------------------------------> (445) | |5.286363692| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43076) <---------------------------------------------------------- (445) | |5.286780519| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43076) <---------------------------------------------------------- (445) | |5.286981035| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43076) ----------------------------------------------------------> (445) | |5.287207118| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43076) ----------------------------------------------------------> (445) | |5.287798345| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.287910581| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43076) ----------------------------------------------------------> (445) | |5.288244002| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.288434849| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43076) ----------------------------------------------------------> (445) | |5.288772259| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.289223767| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43076) <---------------------------------------------------------- (445) | |5.289334497| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43076) ----------------------------------------------------------> (445) | |5.289482552| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43076) ----------------------------------------------------------> (445) | |5.289935941| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43076) <---------------------------------------------------------- (445) | |5.290051407| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\BDSVM | |(43076) ----------------------------------------------------------> (445) | |5.290253995| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43076) <---------------------------------------------------------- (445) | |5.290394386| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43076) ----------------------------------------------------------> (445) | |5.290658455| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43076) <---------------------------------------------------------- (445) | |5.290768720| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43076) ----------------------------------------------------------> (445) | |5.291214075| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43076) <---------------------------------------------------------- (445) | |5.291359359| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43076) ----------------------------------------------------------> (445) | |5.291644543| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43076) <---------------------------------------------------------- (445) | |5.292233194| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43076) <---------------------------------------------------------- (445) | |5.292393772| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43076) ----------------------------------------------------------> (445) | |5.292869274| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\BDMV | |(54504) --------------------------------------> (445) | | |5.293100196| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43076) <---------------------------------------------------------- (445) | |5.293487379| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.293829866| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\BDMV | |(54504) --------------------------------------> (445) | | |5.294035132| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |5.294537810| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.294689031| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43074) ----------------------------------------------------------> (445) | |5.294929131| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |5.295298680| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |5.295890974| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |5.296027149| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43074) ----------------------------------------------------------> (445) | |5.758332494| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |5.759286342| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |8.276066603| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43074) <---------------------------------------------------------- (445) | |8.276375145| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43074) ----------------------------------------------------------> (445) | |8.276763706| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43074) ----------------------------------------------------------> (445) | |8.277239934| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.277382981| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43074) ----------------------------------------------------------> (445) | |8.279661020| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.279953657| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43074) ----------------------------------------------------------> (445) | |8.280874122| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43074) <---------------------------------------------------------- (445) | |8.281112079| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43074) ----------------------------------------------------------> (445) | |8.281237247| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.281433238| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43074) ----------------------------------------------------------> (445) | |8.281776285| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43074) ----------------------------------------------------------> (445) | |8.282039596| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43074) <---------------------------------------------------------- (445) | |8.282218216| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43074) ----------------------------------------------------------> (445) | |8.282506342| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.282844902| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43074) ----------------------------------------------------------> (445) | |8.282997293| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43074) <---------------------------------------------------------- (445) | |8.283290498| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43074) ----------------------------------------------------------> (445) | |8.283478240| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.283655095| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43074) ----------------------------------------------------------> (445) | |8.283885299| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43074) <---------------------------------------------------------- (445) | |8.284211597| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43074) ----------------------------------------------------------> (445) | |8.284373477| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43074) <---------------------------------------------------------- (445) | |8.284609950| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43074) ----------------------------------------------------------> (445) | |8.284759126| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43074) <---------------------------------------------------------- (445) | |8.284870272| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.xdg-volume-info | |(43074) ----------------------------------------------------------> (445) | |8.285205688| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43074) <---------------------------------------------------------- (445) | |8.285333486| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43074) ----------------------------------------------------------> (445) | |8.285594399| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.285673743| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43074) ----------------------------------------------------------> (445) | |8.285832776| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43074) <---------------------------------------------------------- (445) | |8.285982582| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43074) ----------------------------------------------------------> (445) | |8.286220500| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.286433690| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43074) ----------------------------------------------------------> (445) | |8.286613660| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43074) <---------------------------------------------------------- (445) | |8.286738435| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43074) ----------------------------------------------------------> (445) | |8.286940057| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43074) <---------------------------------------------------------- (445) | |8.286987845| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43074) ----------------------------------------------------------> (445) | |8.287321575| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43074) <---------------------------------------------------------- (445) | |8.287443999| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43074) <---------------------------------------------------------- (445) | |8.287629858| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\BDMV | |(43074) ----------------------------------------------------------> (445) | |8.287863723| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43074) ----------------------------------------------------------> (445) | |8.287901411| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.288298210| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43074) <---------------------------------------------------------- (445) | |8.288647315| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43074) <---------------------------------------------------------- (445) | |8.288913926| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43074) ----------------------------------------------------------> (445) | |8.289166889| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43074) ----------------------------------------------------------> (445) | |8.289449640| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.289859335| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |8.289867443| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43074) <---------------------------------------------------------- (445) | |8.290262734| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43074) ----------------------------------------------------------> (445) | |8.290630389| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |8.290823615| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |8.290918288| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43074) <---------------------------------------------------------- (445) | |8.291257665| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\BDMV | |(54504) --------------------------------------> (445) | | |8.291683414| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |8.292162246| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |8.292437530| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\BDMV | |(54504) --------------------------------------> (445) | | |8.293763300| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |8.294475791| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43077) ----------------------------------------------------------> (445) | |8.295279286| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43078) ----------------------------------------------------------> (445) | |8.295473798| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43077) <---------------------------------------------------------- (445) | |8.295729465| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43077) ----------------------------------------------------------> (445) | |8.296202049| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43078) <---------------------------------------------------------- (445) | |8.296488135| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43078) ----------------------------------------------------------> (445) | |8.296596310| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43077) <---------------------------------------------------------- (445) | |8.296769370| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43077) ----------------------------------------------------------> (445) | |8.297341180| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43078) <---------------------------------------------------------- (445) | |8.297487957| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43078) ----------------------------------------------------------> (445) | |8.300208927| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43077) <---------------------------------------------------------- (445) | |8.300440186| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43077) ----------------------------------------------------------> (445) | |8.301360456| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43077) <---------------------------------------------------------- (445) | |8.301505915| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43078) <---------------------------------------------------------- (445) | |8.301612158| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43078) ----------------------------------------------------------> (445) | |8.301657103| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43077) ----------------------------------------------------------> (445) | |8.302286392| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43078) <---------------------------------------------------------- (445) | |8.302322046| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43077) <---------------------------------------------------------- (445) | |8.302409370| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43077) ----------------------------------------------------------> (445) | |8.302497604| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43078) ----------------------------------------------------------> (445) | |8.303080272| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43077) <---------------------------------------------------------- (445) | |8.303115798| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43078) <---------------------------------------------------------- (445) | |8.303178352| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43077) ----------------------------------------------------------> (445) | |8.303249873| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43078) ----------------------------------------------------------> (445) | |8.303865977| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43078) <---------------------------------------------------------- (445) | |8.303900899| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43077) <---------------------------------------------------------- (445) | |8.304000137| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43077) ----------------------------------------------------------> (445) | |8.304072358| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43078) ----------------------------------------------------------> (445) | |8.304576185| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43077) <---------------------------------------------------------- (445) | |8.304611599| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43078) <---------------------------------------------------------- (445) | |8.304763626| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43077) ----------------------------------------------------------> (445) | |8.304859303| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43078) ----------------------------------------------------------> (445) | |8.305460080| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43078) <---------------------------------------------------------- (445) | |8.305494709| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43077) <---------------------------------------------------------- (445) | |8.305577605| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43077) ----------------------------------------------------------> (445) | |8.305654532| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\BDMV | |(43078) ----------------------------------------------------------> (445) | |8.306137887| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43077) <---------------------------------------------------------- (445) | |8.306250697| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43078) <---------------------------------------------------------- (445) | |8.306364097| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43077) ----------------------------------------------------------> (445) | |8.306432029| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43078) ----------------------------------------------------------> (445) | |8.307126054| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43078) <---------------------------------------------------------- (445) | |8.307161516| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43077) <---------------------------------------------------------- (445) | |8.307291209| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43078) ----------------------------------------------------------> (445) | |8.308000952| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43078) <---------------------------------------------------------- (445) | |9.797197931| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |9.798474465| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |9.798752588| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |9.799922887| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |9.803231219| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43079) ----------------------------------------------------------> (445) | |9.804872794| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43079) <---------------------------------------------------------- (445) | |9.805617140| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43079) ----------------------------------------------------------> (445) | |9.810096116| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43079) <---------------------------------------------------------- (445) | |9.810266449| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43079) ----------------------------------------------------------> (445) | |9.816089842| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43079) <---------------------------------------------------------- (445) | |9.816462229| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43079) ----------------------------------------------------------> (445) | |9.827443814| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43079) <---------------------------------------------------------- (445) | |9.827909019| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43079) ----------------------------------------------------------> (445) | |9.830511279| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43079) <---------------------------------------------------------- (445) | |9.830887774| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43079) ----------------------------------------------------------> (445) | |9.836809689| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43079) <---------------------------------------------------------- (445) | |9.837040764| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43079) ----------------------------------------------------------> (445) | |9.837921455| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43079) <---------------------------------------------------------- (445) | |9.838058400| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43079) ----------------------------------------------------------> (445) | |9.838719092| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43079) <---------------------------------------------------------- (445) | |9.838854628| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43079) ----------------------------------------------------------> (445) | |9.839543210| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43079) <---------------------------------------------------------- (445) | |9.839684992| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43079) ----------------------------------------------------------> (445) | |9.840446872| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43079) <---------------------------------------------------------- (445) | |9.840591431| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43079) ----------------------------------------------------------> (445) | |9.845691333| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43079) <---------------------------------------------------------- (445) | |9.846027515| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |9.846918367| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |9.847145160| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |9.848204533| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |9.849657161| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43080) ----------------------------------------------------------> (445) | |9.851225718| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43080) <---------------------------------------------------------- (445) | |9.851397047| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43080) ----------------------------------------------------------> (445) | |9.852538436| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43080) <---------------------------------------------------------- (445) | |9.852693528| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43080) ----------------------------------------------------------> (445) | |9.855285805| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43080) <---------------------------------------------------------- (445) | |9.855323676| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43080) ----------------------------------------------------------> (445) | |9.856080577| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43080) <---------------------------------------------------------- (445) | |9.856159970| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43080) ----------------------------------------------------------> (445) | |9.856788416| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43080) <---------------------------------------------------------- (445) | |9.856892977| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43080) ----------------------------------------------------------> (445) | |9.857653217| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43080) <---------------------------------------------------------- (445) | |9.857733477| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43080) ----------------------------------------------------------> (445) | |9.858451672| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43080) <---------------------------------------------------------- (445) | |9.858578427| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43080) ----------------------------------------------------------> (445) | |9.859480887| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43080) <---------------------------------------------------------- (445) | |9.859589820| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43080) ----------------------------------------------------------> (445) | |9.860290113| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43080) <---------------------------------------------------------- (445) | |9.860358258| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43080) ----------------------------------------------------------> (445) | |9.860935678| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43080) <---------------------------------------------------------- (445) | |9.861018190| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43080) ----------------------------------------------------------> (445) | |9.861951965| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43080) <---------------------------------------------------------- (445) | |10.397758696| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.399162048| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.399353715| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 | |(54504) --------------------------------------> (445) | | |10.400395808| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |10.413858765| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.415118391| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.421740375| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.422480266| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.430102009| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.431088695| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.437805018| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.438750763| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.445869628| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.446650865| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.453852492| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.454638034| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.469865924| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.470690342| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.477866860| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.478789515| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.485770486| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.487272674| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.493693360| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.494413004| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.509751048| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.510654989| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.525944961| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.526962507| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.714455369| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |10.715565320| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |10.748297191| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.749342089| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.751075994| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.751858408| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.767436607| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.768325753| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.974443934| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.975411626| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.981811230| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.982582881| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.989893194| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.990703537| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |10.997676371| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |10.998590251| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |11.005813541| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |11.006587081| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |13.796998083| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |13.798083707| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |13.799148929| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |13.799923173| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |13.802142892| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43081) ----------------------------------------------------------> (445) | |13.803425293| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43081) <---------------------------------------------------------- (445) | |13.803726144| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43081) ----------------------------------------------------------> (445) | |13.804763446| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43081) <---------------------------------------------------------- (445) | |13.804951639| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43081) ----------------------------------------------------------> (445) | |13.815042826| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43081) <---------------------------------------------------------- (445) | |13.815233643| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43081) ----------------------------------------------------------> (445) | |13.816116315| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43081) <---------------------------------------------------------- (445) | |13.816276799| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43081) ----------------------------------------------------------> (445) | |13.817089159| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43081) <---------------------------------------------------------- (445) | |13.817300273| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43081) ----------------------------------------------------------> (445) | |13.818382778| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43081) <---------------------------------------------------------- (445) | |13.818622563| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43081) ----------------------------------------------------------> (445) | |13.819545223| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43081) <---------------------------------------------------------- (445) | |13.819776155| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43081) ----------------------------------------------------------> (445) | |13.820597807| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43081) <---------------------------------------------------------- (445) | |13.820799566| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43081) ----------------------------------------------------------> (445) | |13.821671170| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43081) <---------------------------------------------------------- (445) | |13.821849394| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43081) ----------------------------------------------------------> (445) | |13.822504542| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43081) <---------------------------------------------------------- (445) | |13.822698893| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43081) ----------------------------------------------------------> (445) | |13.823425377| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43081) <---------------------------------------------------------- (445) | |13.823979550| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |13.824647889| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |13.824916754| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |13.825823578| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |13.827501274| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43082) ----------------------------------------------------------> (445) | |13.828732756| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43082) <---------------------------------------------------------- (445) | |13.829057453| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43082) ----------------------------------------------------------> (445) | |13.830000772| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43082) <---------------------------------------------------------- (445) | |13.830242261| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43082) ----------------------------------------------------------> (445) | |13.832906620| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43082) <---------------------------------------------------------- (445) | |13.833173401| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43082) ----------------------------------------------------------> (445) | |13.833880264| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43082) <---------------------------------------------------------- (445) | |13.834105312| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43082) ----------------------------------------------------------> (445) | |13.834767227| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43082) <---------------------------------------------------------- (445) | |13.835000826| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43082) ----------------------------------------------------------> (445) | |13.835645564| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43082) <---------------------------------------------------------- (445) | |13.835864224| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43082) ----------------------------------------------------------> (445) | |13.836554971| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43082) <---------------------------------------------------------- (445) | |13.836741029| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43082) ----------------------------------------------------------> (445) | |13.837373378| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43082) <---------------------------------------------------------- (445) | |13.837556312| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43082) ----------------------------------------------------------> (445) | |13.838288161| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43082) <---------------------------------------------------------- (445) | |13.838475761| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43082) ----------------------------------------------------------> (445) | |13.839190333| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43082) <---------------------------------------------------------- (445) | |13.839383113| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43082) ----------------------------------------------------------> (445) | |13.840188321| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43082) <---------------------------------------------------------- (445) | |16.583539691| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 | |(54504) --------------------------------------> (445) | | |16.587087844| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |16.700163196| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |16.701116822| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |17.795216916| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |17.796167888| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |17.796486424| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |17.797766436| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |17.800547155| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43083) ----------------------------------------------------------> (445) | |17.801836861| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43083) <---------------------------------------------------------- (445) | |17.802152189| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43083) ----------------------------------------------------------> (445) | |17.803375460| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43083) <---------------------------------------------------------- (445) | |17.803545996| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43083) ----------------------------------------------------------> (445) | |17.806811956| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43083) <---------------------------------------------------------- (445) | |17.806950960| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43083) ----------------------------------------------------------> (445) | |17.807948868| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43083) <---------------------------------------------------------- (445) | |17.808027839| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43083) ----------------------------------------------------------> (445) | |17.809027167| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43083) <---------------------------------------------------------- (445) | |17.809116492| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43083) ----------------------------------------------------------> (445) | |17.809922376| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43083) <---------------------------------------------------------- (445) | |17.810007155| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43083) ----------------------------------------------------------> (445) | |17.810769852| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43083) <---------------------------------------------------------- (445) | |17.810848618| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43083) ----------------------------------------------------------> (445) | |17.811545565| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43083) <---------------------------------------------------------- (445) | |17.811626013| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43083) ----------------------------------------------------------> (445) | |17.812455415| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43083) <---------------------------------------------------------- (445) | |17.812526238| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43083) ----------------------------------------------------------> (445) | |17.813261307| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43083) <---------------------------------------------------------- (445) | |17.813335657| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43083) ----------------------------------------------------------> (445) | |17.814124445| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43083) <---------------------------------------------------------- (445) | |17.814550265| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |17.815515717| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |17.815630105| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |17.816446783| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |17.818178052| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43084) ----------------------------------------------------------> (445) | |17.819037007| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43084) <---------------------------------------------------------- (445) | |17.819211054| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43084) ----------------------------------------------------------> (445) | |17.819999707| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43084) <---------------------------------------------------------- (445) | |17.820096428| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43084) ----------------------------------------------------------> (445) | |17.822906633| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43084) <---------------------------------------------------------- (445) | |17.823024387| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43084) ----------------------------------------------------------> (445) | |17.823776084| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43084) <---------------------------------------------------------- (445) | |17.823869894| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43084) ----------------------------------------------------------> (445) | |17.824580111| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43084) <---------------------------------------------------------- (445) | |17.824667266| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43084) ----------------------------------------------------------> (445) | |17.825456657| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43084) <---------------------------------------------------------- (445) | |17.825532927| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43084) ----------------------------------------------------------> (445) | |17.826255678| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43084) <---------------------------------------------------------- (445) | |17.826330635| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43084) ----------------------------------------------------------> (445) | |17.826998969| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43084) <---------------------------------------------------------- (445) | |17.827076589| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43084) ----------------------------------------------------------> (445) | |17.827777368| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43084) <---------------------------------------------------------- (445) | |17.827854901| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43084) ----------------------------------------------------------> (445) | |17.828579443| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43084) <---------------------------------------------------------- (445) | |17.828676845| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43084) ----------------------------------------------------------> (445) | |17.829484511| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43084) <---------------------------------------------------------- (445) | |19.861482013| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 | |(54504) --------------------------------------> (445) | | |19.862351842| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |19.873710036| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* | |(54504) --------------------------------------> (445) | | |19.874521904| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |21.797353368| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |21.798509654| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |21.798797327| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |21.799590600| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |21.802411651| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43085) ----------------------------------------------------------> (445) | |21.803749630| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43085) <---------------------------------------------------------- (445) | |21.804048826| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43085) ----------------------------------------------------------> (445) | |21.805161102| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43085) <---------------------------------------------------------- (445) | |21.805314997| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43085) ----------------------------------------------------------> (445) | |21.809001136| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43085) <---------------------------------------------------------- (445) | |21.809112165| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43085) ----------------------------------------------------------> (445) | |21.810052386| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43085) <---------------------------------------------------------- (445) | |21.810159141| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43085) ----------------------------------------------------------> (445) | |21.810870224| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43085) <---------------------------------------------------------- (445) | |21.810957069| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43085) ----------------------------------------------------------> (445) | |21.811813289| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43085) <---------------------------------------------------------- (445) | |21.811907983| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43085) ----------------------------------------------------------> (445) | |21.812647440| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43085) <---------------------------------------------------------- (445) | |21.812732871| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43085) ----------------------------------------------------------> (445) | |21.813510755| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43085) <---------------------------------------------------------- (445) | |21.813610694| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43085) ----------------------------------------------------------> (445) | |21.814366910| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43085) <---------------------------------------------------------- (445) | |21.814474526| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43085) ----------------------------------------------------------> (445) | |21.815139012| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43085) <---------------------------------------------------------- (445) | |21.815377762| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43085) ----------------------------------------------------------> (445) | |21.816096753| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43085) <---------------------------------------------------------- (445) | |21.816636465| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |21.817402967| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |21.817517019| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |21.818306954| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |21.819914064| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43086) ----------------------------------------------------------> (445) | |21.820838954| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43086) <---------------------------------------------------------- (445) | |21.821002951| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43086) ----------------------------------------------------------> (445) | |21.821773570| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43086) <---------------------------------------------------------- (445) | |21.821868513| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43086) ----------------------------------------------------------> (445) | |21.824735971| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43086) <---------------------------------------------------------- (445) | |21.824818054| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43086) ----------------------------------------------------------> (445) | |21.825684321| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43086) <---------------------------------------------------------- (445) | |21.825757411| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43086) ----------------------------------------------------------> (445) | |21.826432218| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43086) <---------------------------------------------------------- (445) | |21.826496927| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43086) ----------------------------------------------------------> (445) | |21.827455661| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43086) <---------------------------------------------------------- (445) | |21.827542641| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43086) ----------------------------------------------------------> (445) | |21.828250360| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43086) <---------------------------------------------------------- (445) | |21.828308720| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43086) ----------------------------------------------------------> (445) | |21.829037726| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43086) <---------------------------------------------------------- (445) | |21.829116358| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43086) ----------------------------------------------------------> (445) | |21.829937910| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43086) <---------------------------------------------------------- (445) | |21.830022782| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43086) ----------------------------------------------------------> (445) | |21.830748304| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43086) <---------------------------------------------------------- (445) | |21.830827112| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43086) ----------------------------------------------------------> (445) | |21.831547680| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43086) <---------------------------------------------------------- (445) | |25.797149746| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |25.798131967| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |25.798456281| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |25.799405430| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |25.801964398| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43087) ----------------------------------------------------------> (445) | |25.803117662| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43087) <---------------------------------------------------------- (445) | |25.803431329| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43087) ----------------------------------------------------------> (445) | |25.804444922| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43087) <---------------------------------------------------------- (445) | |25.804640808| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43087) ----------------------------------------------------------> (445) | |25.807462048| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43087) <---------------------------------------------------------- (445) | |25.807618195| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43087) ----------------------------------------------------------> (445) | |25.808299934| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43087) <---------------------------------------------------------- (445) | |25.808456710| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43087) ----------------------------------------------------------> (445) | |25.809245771| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43087) <---------------------------------------------------------- (445) | |25.809352077| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43087) ----------------------------------------------------------> (445) | |25.810578838| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43087) <---------------------------------------------------------- (445) | |25.810686351| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43087) ----------------------------------------------------------> (445) | |25.811466154| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43087) <---------------------------------------------------------- (445) | |25.811587347| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43087) ----------------------------------------------------------> (445) | |25.812240129| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43087) <---------------------------------------------------------- (445) | |25.812357105| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43087) ----------------------------------------------------------> (445) | |25.813058659| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43087) <---------------------------------------------------------- (445) | |25.813152378| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43087) ----------------------------------------------------------> (445) | |25.813700779| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43087) <---------------------------------------------------------- (445) | |25.813814972| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43087) ----------------------------------------------------------> (445) | |25.814652240| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43087) <---------------------------------------------------------- (445) | |25.815085789| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |25.815925434| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |25.816036995| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |25.816859806| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |25.818500256| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43088) ----------------------------------------------------------> (445) | |25.819484113| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43088) <---------------------------------------------------------- (445) | |25.819720810| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43088) ----------------------------------------------------------> (445) | |25.820568818| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43088) <---------------------------------------------------------- (445) | |25.820704844| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43088) ----------------------------------------------------------> (445) | |25.822940206| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43088) <---------------------------------------------------------- (445) | |25.823074447| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43088) ----------------------------------------------------------> (445) | |25.823751492| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43088) <---------------------------------------------------------- (445) | |25.823876317| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43088) ----------------------------------------------------------> (445) | |25.824514342| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43088) <---------------------------------------------------------- (445) | |25.824613104| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43088) ----------------------------------------------------------> (445) | |25.825412150| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43088) <---------------------------------------------------------- (445) | |25.825535560| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43088) ----------------------------------------------------------> (445) | |25.826175957| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43088) <---------------------------------------------------------- (445) | |25.826291786| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43088) ----------------------------------------------------------> (445) | |25.826980554| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43088) <---------------------------------------------------------- (445) | |25.827084818| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43088) ----------------------------------------------------------> (445) | |25.827748582| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43088) <---------------------------------------------------------- (445) | |25.827853708| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43088) ----------------------------------------------------------> (445) | |25.828705595| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43088) <---------------------------------------------------------- (445) | |25.828810030| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43088) ----------------------------------------------------------> (445) | |25.829438658| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43088) <---------------------------------------------------------- (445) | |29.797222453| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |29.798273398| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |29.798552366| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |29.799452395| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |29.801925398| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43089) ----------------------------------------------------------> (445) | |29.802972108| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43089) <---------------------------------------------------------- (445) | |29.803229393| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43089) ----------------------------------------------------------> (445) | |29.804184093| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43089) <---------------------------------------------------------- (445) | |29.804321617| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43089) ----------------------------------------------------------> (445) | |29.808166043| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43089) <---------------------------------------------------------- (445) | |29.808311135| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43089) ----------------------------------------------------------> (445) | |29.809163657| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43089) <---------------------------------------------------------- (445) | |29.809493077| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43089) ----------------------------------------------------------> (445) | |29.810319318| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43089) <---------------------------------------------------------- (445) | |29.810577678| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43089) ----------------------------------------------------------> (445) | |29.811565426| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43089) <---------------------------------------------------------- (445) | |29.811810049| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43089) ----------------------------------------------------------> (445) | |29.812551612| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43089) <---------------------------------------------------------- (445) | |29.812778461| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43089) ----------------------------------------------------------> (445) | |29.813501473| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43089) <---------------------------------------------------------- (445) | |29.813620076| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43089) ----------------------------------------------------------> (445) | |29.814369052| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43089) <---------------------------------------------------------- (445) | |29.814676107| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43089) ----------------------------------------------------------> (445) | |29.815369248| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43089) <---------------------------------------------------------- (445) | |29.815681123| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43089) ----------------------------------------------------------> (445) | |29.816436847| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43089) <---------------------------------------------------------- (445) | |29.817131491| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |29.817940891| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |29.818034274| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |29.819146682| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |29.820913483| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43090) ----------------------------------------------------------> (445) | |29.821912589| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43090) <---------------------------------------------------------- (445) | |29.822116413| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43090) ----------------------------------------------------------> (445) | |29.823090389| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43090) <---------------------------------------------------------- (445) | |29.823201404| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43090) ----------------------------------------------------------> (445) | |29.825685464| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43090) <---------------------------------------------------------- (445) | |29.825801365| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43090) ----------------------------------------------------------> (445) | |29.826605539| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43090) <---------------------------------------------------------- (445) | |29.826692538| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43090) ----------------------------------------------------------> (445) | |29.827665191| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43090) <---------------------------------------------------------- (445) | |29.827750479| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43090) ----------------------------------------------------------> (445) | |29.828545577| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43090) <---------------------------------------------------------- (445) | |29.828664941| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43090) ----------------------------------------------------------> (445) | |29.829391126| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43090) <---------------------------------------------------------- (445) | |29.829471678| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43090) ----------------------------------------------------------> (445) | |29.830163646| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43090) <---------------------------------------------------------- (445) | |29.830270485| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43090) ----------------------------------------------------------> (445) | |29.831098115| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43090) <---------------------------------------------------------- (445) | |29.831205461| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43090) ----------------------------------------------------------> (445) | |29.831981622| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43090) <---------------------------------------------------------- (445) | |29.832090294| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43090) ----------------------------------------------------------> (445) | |29.832851402| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43090) <---------------------------------------------------------- (445) | |30.069911376| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |30.070820763| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |30.071282227| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 | |(54504) --------------------------------------> (445) | | |30.072208117| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |30.072749762| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |(54504) --------------------------------------> (445) | | |30.073507764| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(54504) <-------------------------------------- (445) | | |33.797695283| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |33.798900989| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |33.799094230| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 | |(54504) --------------------------------------> (445) | | |33.799991237| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |33.802471256| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43091) ----------------------------------------------------------> (445) | |33.803720446| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43091) <---------------------------------------------------------- (445) | |33.804032383| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43091) ----------------------------------------------------------> (445) | |33.805206713| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43091) <---------------------------------------------------------- (445) | |33.805454555| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43091) ----------------------------------------------------------> (445) | |33.809079622| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43091) <---------------------------------------------------------- (445) | |33.809303611| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43091) ----------------------------------------------------------> (445) | |33.810312711| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43091) <---------------------------------------------------------- (445) | |33.810536168| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43091) ----------------------------------------------------------> (445) | |33.811445657| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43091) <---------------------------------------------------------- (445) | |33.811659473| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43091) ----------------------------------------------------------> (445) | |33.812546674| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43091) <---------------------------------------------------------- (445) | |33.812694700| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43091) ----------------------------------------------------------> (445) | |33.813511121| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43091) <---------------------------------------------------------- (445) | |33.813716236| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43091) ----------------------------------------------------------> (445) | |33.814355566| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43091) <---------------------------------------------------------- (445) | |33.814538215| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 | |(43091) ----------------------------------------------------------> (445) | |33.815345329| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43091) <---------------------------------------------------------- (445) | |33.815548481| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43091) ----------------------------------------------------------> (445) | |33.816387299| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43091) <---------------------------------------------------------- (445) | |33.816580843| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43091) ----------------------------------------------------------> (445) | |33.817470054| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43091) <---------------------------------------------------------- (445) | |33.818083842| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |33.818888272| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED | |(54504) <-------------------------------------- (445) | | |33.818977305| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash | |(54504) --------------------------------------> (445) | | |33.819837643| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL | |(54504) <-------------------------------------- (445) | | |33.821745452| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request | |(43092) ----------------------------------------------------------> (445) | |33.822802214| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response | |(43092) <---------------------------------------------------------- (445) | |33.822991384| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE | |(43092) ----------------------------------------------------------> (445) | |33.823906126| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED | |(43092) <---------------------------------------------------------- (445) | |33.824009591| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname | |(43092) ----------------------------------------------------------> (445) | |33.827862655| Session Setup AndX Response | | |SMB: Session Setup AndX Response | |(43092) <---------------------------------------------------------- (445) | |33.827977966| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 | |(43092) ----------------------------------------------------------> (445) | |33.828687335| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43092) <---------------------------------------------------------- (445) | |33.828793542| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info | |(43092) ----------------------------------------------------------> (445) | |33.829580656| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43092) <---------------------------------------------------------- (445) | |33.829693835| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info | |(43092) ----------------------------------------------------------> (445) | |33.830557308| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO | |(43092) <---------------------------------------------------------- (445) | |33.830647915| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ | |(43092) ----------------------------------------------------------> (445) | |33.831481286| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response | |(43092) <---------------------------------------------------------- (445) | |33.831568376| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 | |(43092) ----------------------------------------------------------> (445) | |33.832253183| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED | |(43092) <---------------------------------------------------------- (445) | |33.832343377| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash | |(43092) ----------------------------------------------------------> (445) | |33.833112853| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND | |(43092) <---------------------------------------------------------- (445) | |33.833200605| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(43092) ----------------------------------------------------------> (445) | |33.833952149| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(43092) <---------------------------------------------------------- (445) | |33.834041753| Logoff AndX Request | | |SMB: Logoff AndX Request | |(43092) ----------------------------------------------------------> (445) | |33.834753972| Logoff AndX Response | | |SMB: Logoff AndX Response | |(43092) <---------------------------------------------------------- (445) | |37.705830009| Tree Disconnect Request | | |SMB: Tree Disconnect Request | |(54504) --------------------------------------> (445) | | |37.706816043| Tree Disconnect Response | | |SMB: Tree Disconnect Response | |(54504) <-------------------------------------- (445) | | |37.706982502| Logoff AndX Request | | |SMB: Logoff AndX Request | |(54504) --------------------------------------> (445) | | |37.707600958| Logoff AndX Response | | |SMB: Logoff AndX Response | |(54504) <-------------------------------------- (445) | |