The Samba-Bugzilla – Attachment 12573 Details for
Bug 12379
Manjaro 16.06: STATUS_PATH_NOT_COVERED from a Windows Domain Controller with DFS
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
plain text capture only for SMB protocol
network captures - Mint and Manjaro.txt (text/plain), 210.72 KB, created by
v17564
on 2016-10-13 18:17:48 UTC
(
hide
)
Description:
plain text capture only for SMB protocol
Filename:
MIME Type:
Creator:
v17564
Created:
2016-10-13 18:17:48 UTC
Size:
210.72 KB
patch
obsolete
>======================= >=== Mint === >======================= > >|Time | 172.16.40.132 | 10.3.11.49 | >| | | 10.3.11.50 | | 10.3.15.157 | >|6.848613 | Negotiate Protocol R | | |SMB: Negotiate Protocol Request >| |(47865) ------------------> (445) | | | >|6.849529 | Negotiate Protocol R | | |SMB: Negotiate Protocol Response >| |(47865) <------------------ (445) | | | >|6.849721 | Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(47865) ------------------> (445) | | | >|6.850614 | Session Setup AndX R | | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(47865) <------------------ (445) | | | >|6.850829 | Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: example\netbiosname >| |(47865) ------------------> (445) | | | >|6.858505 | Session Setup AndX R | | |SMB: Session Setup AndX Response >| |(47865) <------------------ (445) | | | >|6.858730 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\example.com\dir1 >| |(47865) ------------------> (445) | | | >|6.859701 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Response >| |(47865) <------------------ (445) | | | >|6.859867 | Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(47865) ------------------> (445) | | | >|6.860695 | Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO >| |(47865) <------------------ (445) | | | >|6.860872 | Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(47865) ------------------> (445) | | | >|6.861769 | Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO >| |(47865) <------------------ (445) | | | >|6.861983 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\10.3.11.50\IPC$ >| |(47865) ------------------> (445) | | | >|6.862666 | Tree Connect AndX Re | | |SMB: Tree Connect AndX Response >| |(47865) <------------------ (445) | | | >|6.862895 | Trans2 Request, GET_ | | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \example.com\dir1 >| |(47865) ------------------> (445) | | | >|6.863890 | Trans2 Response, GET | | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(47865) <------------------ (445) | | | >|6.864118 | Tree Disconnect Requ | | |SMB: Tree Disconnect Request >| |(47865) ------------------> (445) | | | >|6.864915 | Tree Disconnect Resp | | |SMB: Tree Disconnect Response >| |(47865) <------------------ (445) | | | >|6.865099 | Logoff AndX Request | | |SMB: Logoff AndX Request >| |(47865) ------------------> (445) | | | >|6.865760 | Logoff AndX Response | | |SMB: Logoff AndX Response >| |(47865) <------------------ (445) | | | >|6.867469 | Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(58683) --------------------------------------> (445) | | >|6.868581 | Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(58683) <-------------------------------------- (445) | | >|6.868850 | Session Setup AndX Request, NTLMSSP_NEGO | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(58683) --------------------------------------> (445) | | >|6.869746 | Session Setup AndX Response, NTLMSSP_CHA | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(58683) <-------------------------------------- (445) | | >|6.869983 | Session Setup AndX Request, NTLMSSP_AUTH | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: example\netbiosname >| |(58683) --------------------------------------> (445) | | >|6.872256 | Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(58683) <-------------------------------------- (445) | | >|6.872428 | Tree Connect AndX Request, Path: \\WDC2\d | |SMB: Tree Connect AndX Request, Path: \\WDC2\dir1 >| |(58683) --------------------------------------> (445) | | >|6.873308 | Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(58683) <-------------------------------------- (445) | | >|6.873413 | Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(58683) --------------------------------------> (445) | | >|6.874057 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(58683) <-------------------------------------- (445) | | >|6.874251 | Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(58683) --------------------------------------> (445) | | >|6.875503 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(58683) <-------------------------------------- (445) | | >|6.875678 | Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC2\dir1\\dir2\dir3 >| |(58683) --------------------------------------> (445) | | >|6.876429 | Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(58683) <-------------------------------------- (445) | | >|6.876503 | Tree Connect AndX Request, Path: \\10.3. | |SMB: Tree Connect AndX Request, Path: \\10.3.11.49\IPC$ >| |(58683) --------------------------------------> (445) | | >|6.877080 | Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(58683) <-------------------------------------- (445) | | >|6.877247 | Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC2\dir1\\dir2\dir3 >| |(58683) --------------------------------------> (445) | | >|6.878027 | Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(58683) <-------------------------------------- (445) | | >|6.878277 | Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(58683) --------------------------------------> (445) | | >|6.879035 | Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(58683) <-------------------------------------- (445) | | >|6.879202 | Logoff AndX Request | | |SMB: Logoff AndX Request >| |(58683) --------------------------------------> (445) | | >|6.879993 | Logoff AndX Response | | |SMB: Logoff AndX Response >| |(58683) <-------------------------------------- (445) | | >|6.881637 | Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(56574) ----------------------------------------------------------> (445) | >|6.882770 | Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(56574) <---------------------------------------------------------- (445) | >|6.882997 | Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(56574) ----------------------------------------------------------> (445) | >|6.883996 | Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(56574) <---------------------------------------------------------- (445) | >|6.884211 | Session Setup AndX Request, NTLMSSP_AUTH, User: example\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: example\netbiosname >| |(56574) ----------------------------------------------------------> (445) | >|6.889212 | Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(56574) <---------------------------------------------------------- (445) | >|6.889419 | Tree Connect AndX Request, Path: \\dfs2\dir0 | |SMB: Tree Connect AndX Request, Path: \\dfs2\dir0 >| |(56574) ----------------------------------------------------------> (445) | >|6.890070 | Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(56574) <---------------------------------------------------------- (445) | >|6.890296 | Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(56574) ----------------------------------------------------------> (445) | >|6.890975 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(56574) <---------------------------------------------------------- (445) | >|6.891175 | Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(56574) ----------------------------------------------------------> (445) | >|6.892361 | Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(56574) <---------------------------------------------------------- (445) | >|6.892480 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3 >| |(56574) ----------------------------------------------------------> (445) | >|6.893630 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(56574) <---------------------------------------------------------- (445) | >|6.893836 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: >| |(56574) ----------------------------------------------------------> (445) | >|6.894686 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(56574) <---------------------------------------------------------- (445) | >|6.894890 | Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, P |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: >| |(56574) ----------------------------------------------------------> (445) | >|6.895808 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(56574) <---------------------------------------------------------- (445) | >|6.895997 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3 >| |(56574) ----------------------------------------------------------> (445) | >|6.896784 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(56574) <---------------------------------------------------------- (445) | >|6.896944 | Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, P |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \dir3 >| |(56574) ----------------------------------------------------------> (445) | >|6.897723 | Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(56574) <---------------------------------------------------------- (445) | >|6.899055 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash >| |(56574) ----------------------------------------------------------> (445) | >|6.900152 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|6.900405 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash-1000 >| |(56574) ----------------------------------------------------------> (445) | >|6.901025 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|6.901688 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.902595 | Trans2 Response, FIND_FIRST2, Files: . .. list of files |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.903121 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.xdg-volume-info >| |(56574) ----------------------------------------------------------> (445) | >|6.904087 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|6.904291 | Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\autorun.inf >| |(56574) ----------------------------------------------------------> (445) | >|6.904991 | Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|6.905148 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.906017 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.906174 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.907515 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.907748 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.908802 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.909026 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.910000 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.910432 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.911267 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.911728 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.913807 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.914200 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.915233 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.915608 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.916387 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.916583 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.917200 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.917520 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.918160 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.918525 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.919180 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.919521 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.920409 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.920675 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.921471 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.921822 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.922707 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.923009 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.923705 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.924000 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.924812 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.925129 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.925968 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.926401 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.927468 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.927859 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.928741 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.929114 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.930076 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|6.932009 | Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|6.933072 | Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|13.615642| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3 >| |(56574) ----------------------------------------------------------> (445) | >|13.616978| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(56574) <---------------------------------------------------------- (445) | >|13.669257| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.hidden >| |(56574) ----------------------------------------------------------> (445) | >|13.670341| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.670896| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash >| |(56574) ----------------------------------------------------------> (445) | >|13.671653| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.671720| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\.Trash-1000 >| |(56574) ----------------------------------------------------------> (445) | >|13.672430| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.672493| Trans2 Request, FIND_FIRST2, Pattern: \dir3\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\* >| |(56574) ----------------------------------------------------------> (445) | >|13.673528| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files and subdirs >| |(56574) <---------------------------------------------------------- (445) | >|13.687043| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* >| |(56574) ----------------------------------------------------------> (445) | >|13.688034| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files >| |(56574) <---------------------------------------------------------- (445) | >|13.688194| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden >| |(56574) ----------------------------------------------------------> (445) | >|13.689056| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.693889| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* >| |(56574) ----------------------------------------------------------> (445) | >|13.694805| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files Thumbs.db >| |(56574) <---------------------------------------------------------- (445) | >|13.694921| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden >| |(56574) ----------------------------------------------------------> (445) | >|13.695821| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.696644| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* >| |(56574) ----------------------------------------------------------> (445) | >|13.697547| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files Thumbs.db >| |(56574) <---------------------------------------------------------- (445) | >|13.697918| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden >| |(56574) ----------------------------------------------------------> (445) | >|13.698616| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.699132| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* >| |(56574) ----------------------------------------------------------> (445) | >|13.699909| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files >| |(56574) <---------------------------------------------------------- (445) | >|13.700066| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\ips\.hidden >| |(56574) ----------------------------------------------------------> (445) | >|13.700725| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.701577| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* >| |(56574) ----------------------------------------------------------> (445) | >|13.702534| Trans2 Response, FIND_FIRST2, Error: STATUS_ACCESS_DENIED |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_ACCESS_DENIED >| |(56574) <---------------------------------------------------------- (445) | >|13.703532| Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* |SMB: Trans2 Request, FIND_FIRST2, Pattern: \dir3\subdir\* >| |(56574) ----------------------------------------------------------> (445) | >|13.704430| Trans2 Response, FIND_FIRST2, Files: . .. list of files and |SMB: Trans2 Response, FIND_FIRST2, Files: . .. list of files >| |(56574) <---------------------------------------------------------- (445) | >|13.704610| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3\subdir\.hidden >| |(56574) ----------------------------------------------------------> (445) | >|13.705424| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(56574) <---------------------------------------------------------- (445) | >|13.780448| Trans2 Request, QUERY_FS_INFO, Query FS Size Info | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(56574) ----------------------------------------------------------> (445) | >|13.781335| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(56574) <---------------------------------------------------------- (445) | >|19.079166| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir3 >| |(56574) ----------------------------------------------------------> (445) | >|19.083106| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(56574) <---------------------------------------------------------- (445) | >|25.108437| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(56574) ----------------------------------------------------------> (445) | >|25.109117| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(56574) <---------------------------------------------------------- (445) | >|25.109245| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(56574) ----------------------------------------------------------> (445) | >|25.109829| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(56574) <---------------------------------------------------------- (445) | > > > > >======================= >=== Manajro === >======================= > >|Time | 10.0.2.15 | 10.3.11.50 | >| | | 10.3.11.47 | | 10.3.15.157 | >|5.170270885| Negotiate Protocol R | | |SMB: Negotiate Protocol Request >| |(53240) ------------------> (445) | | | >|5.171330104| Negotiate Protocol R | | |SMB: Negotiate Protocol Response >| |(53240) <------------------ (445) | | | >|5.171733887| Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(53240) ------------------> (445) | | | >|5.172833829| Session Setup AndX R | | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(53240) <------------------ (445) | | | >|5.204816337| Session Setup AndX R | | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(53240) ------------------> (445) | | | >|5.207366104| Session Setup AndX R | | |SMB: Session Setup AndX Response >| |(53240) <------------------ (445) | | | >|5.207467447| Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\example.com\dir1 >| |(53240) ------------------> (445) | | | >|5.208713120| Tree Connect AndX Re | | |SMB: Tree Connect AndX Response >| |(53240) <------------------ (445) | | | >|5.208848625| Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(53240) ------------------> (445) | | | >|5.209857670| Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO >| |(53240) <------------------ (445) | | | >|5.209970652| Trans2 Request, QUER | | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(53240) ------------------> (445) | | | >|5.211131420| Trans2 Response, QUE | | |SMB: Trans2 Response, QUERY_FS_INFO >| |(53240) <------------------ (445) | | | >|5.211250873| Tree Connect AndX Re | | |SMB: Tree Connect AndX Request, Path: \\10.3.11.47\IPC$ >| |(53240) ------------------> (445) | | | >|5.211957166| Tree Connect AndX Re | | |SMB: Tree Connect AndX Response >| |(53240) <------------------ (445) | | | >|5.212030861| Trans2 Request, GET_ | | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \example.com\dir1 >| |(53240) ------------------> (445) | | | >|5.213059093| Trans2 Response, GET | | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(53240) <------------------ (445) | | | >|5.221388952| Tree Disconnect Requ | | |SMB: Tree Disconnect Request >| |(53240) ------------------> (445) | | | >|5.222290460| Tree Disconnect Resp | | |SMB: Tree Disconnect Response >| |(53240) <------------------ (445) | | | >|5.222390041| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(53240) ------------------> (445) | | | >|5.223354643| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(53240) <------------------ (445) | | | >|5.225068489| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(54504) --------------------------------------> (445) | | >|5.225817106| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(54504) <-------------------------------------- (445) | | >|5.226104092| Session Setup AndX Request, NTLMSSP_NEGO | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(54504) --------------------------------------> (445) | | >|5.226903024| Session Setup AndX Response, NTLMSSP_CHA | |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(54504) <-------------------------------------- (445) | | >|5.227273374| Session Setup AndX Request, NTLMSSP_AUTH | |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(54504) --------------------------------------> (445) | | >|5.229173495| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(54504) <-------------------------------------- (445) | | >|5.229381738| Tree Connect AndX Request, Path: \\WDC3\ | |SMB: Tree Connect AndX Request, Path: \\WDC3\dir1 >| |(54504) --------------------------------------> (445) | | >|5.230107486| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(54504) <-------------------------------------- (445) | | >|5.230313889| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(54504) --------------------------------------> (445) | | >|5.230974349| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|5.231178427| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(54504) --------------------------------------> (445) | | >|5.232147743| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|5.232351107| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\\dir2\dir3 >| |(54504) --------------------------------------> (445) | | >|5.233148049| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.233307158| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: >| |(54504) --------------------------------------> (445) | | >|5.234258017| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(54504) <-------------------------------------- (445) | | >|5.234415318| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3 >| |(54504) --------------------------------------> (445) | | >|5.235263122| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(54504) <-------------------------------------- (445) | | >|5.235385079| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1 >| |(54504) --------------------------------------> (445) | | >|5.236330253| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(54504) <-------------------------------------- (445) | | >|5.236542876| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\\dir2 >| |(54504) --------------------------------------> (445) | | >|5.237128589| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.237315294| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \dir2\dir3 >| |(54504) --------------------------------------> (445) | | >|5.237994298| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(54504) <-------------------------------------- (445) | | >|5.238186359| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \dir2\dir3 >| |(54504) --------------------------------------> (445) | | >|5.239019148| Trans2 Response, QUERY_PATH_INFO | |SMB: Trans2 Response, QUERY_PATH_INFO >| |(54504) <-------------------------------------- (445) | | >|5.239765211| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|5.240397709| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.241834969| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|5.242495967| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.252786026| Tree Connect AndX Request, Path: \\10.8. | |SMB: Tree Connect AndX Request, Path: \\10.3.11.50\IPC$ >| |(54504) --------------------------------------> (445) | | >|5.253624754| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(54504) <-------------------------------------- (445) | | >|5.255099063| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.255465223| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|5.255835763| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.256031247| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.256207278| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.256965920| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.257310765| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.257886125| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.257962080| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\AACS >| |(54504) --------------------------------------> (445) | | >|5.258631481| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.258761009| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\AACS >| |(54504) --------------------------------------> (445) | | >|5.258936124| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.xdg-volume-info >| |(54504) --------------------------------------> (445) | | >|5.259516420| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.259815248| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.259970845| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.xdg-volume-info >| |(54504) --------------------------------------> (445) | | >|5.260183889| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\autorun.inf >| |(54504) --------------------------------------> (445) | | >|5.260568766| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.261071046| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.261655085| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.262185888| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43074) ----------------------------------------------------------> (445) | >|5.262368150| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.262823261| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43075) ----------------------------------------------------------> (445) | >|5.263218050| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.263280845| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43074) <---------------------------------------------------------- (445) | >|5.263747000| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43075) <---------------------------------------------------------- (445) | >|5.263852407| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.263963092| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.264176762| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43075) ----------------------------------------------------------> (445) | >|5.264381845| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.264575469| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43074) ----------------------------------------------------------> (445) | >|5.264606557| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.264878286| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43076) ----------------------------------------------------------> (445) | >|5.265010094| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43075) <---------------------------------------------------------- (445) | >|5.265142201| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.265239696| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43074) <---------------------------------------------------------- (445) | >|5.265355293| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43074) ----------------------------------------------------------> (445) | >|5.265498728| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.265584728| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43076) <---------------------------------------------------------- (445) | >|5.265880918| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43076) ----------------------------------------------------------> (445) | >|5.266090316| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43075) ----------------------------------------------------------> (445) | >|5.266177536| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.266403859| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.266682314| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43076) <---------------------------------------------------------- (445) | >|5.266857254| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43076) ----------------------------------------------------------> (445) | >|5.267013346| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.267119859| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.267593533| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.267693147| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.268190717| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.268283711| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.268787530| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.268879943| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.269493085| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.269604076| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.270199789| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.270307849| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.270877195| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.270984083| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.271422109| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43075) <---------------------------------------------------------- (445) | >|5.271557680| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.271619045| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43075) ----------------------------------------------------------> (445) | >|5.271775297| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43076) <---------------------------------------------------------- (445) | >|5.271833006| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.271932568| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43076) ----------------------------------------------------------> (445) | >|5.272220787| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43075) <---------------------------------------------------------- (445) | >|5.272287284| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.272494882| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43076) <---------------------------------------------------------- (445) | >|5.272557069| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.272654078| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43076) ----------------------------------------------------------> (445) | >|5.272777180| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43075) ----------------------------------------------------------> (445) | >|5.273208901| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.273380677| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.273403027| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43075) <---------------------------------------------------------- (445) | >|5.273490658| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43076) ----------------------------------------------------------> (445) | >|5.273562183| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.273583028| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43075) ----------------------------------------------------------> (445) | >|5.274110040| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.274134771| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.274138041| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43075) <---------------------------------------------------------- (445) | >|5.274273516| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.274333211| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43075) ----------------------------------------------------------> (445) | >|5.274419863| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43076) ----------------------------------------------------------> (445) | >|5.274843018| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.274999807| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.275055577| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43076) <---------------------------------------------------------- (445) | >|5.275078928| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43075) <---------------------------------------------------------- (445) | >|5.275134546| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43075) ----------------------------------------------------------> (445) | >|5.275285575| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43076) ----------------------------------------------------------> (445) | >|5.275453844| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.275601046| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|5.275707278| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43075) <---------------------------------------------------------- (445) | >|5.275815033| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\AACS >| |(43075) ----------------------------------------------------------> (445) | >|5.276191976| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.276220259| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43076) <---------------------------------------------------------- (445) | >|5.276517736| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\autorun.inf >| |(54504) --------------------------------------> (445) | | >|5.276591864| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43075) <---------------------------------------------------------- (445) | >|5.277087172| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.277477850| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43076) ----------------------------------------------------------> (445) | >|5.278167356| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.282226063| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43075) ----------------------------------------------------------> (445) | >|5.282312893| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43076) ----------------------------------------------------------> (445) | >|5.282476215| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43076) ----------------------------------------------------------> (445) | >|5.282851666| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43075) <---------------------------------------------------------- (445) | >|5.282916899| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43075) ----------------------------------------------------------> (445) | >|5.282954927| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43076) <---------------------------------------------------------- (445) | >|5.283380522| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.283628036| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43075) <---------------------------------------------------------- (445) | >|5.283834996| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43076) ----------------------------------------------------------> (445) | >|5.284199710| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|5.284407337| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\BDSVM >| |(54504) --------------------------------------> (445) | | >|5.284441855| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43076) <---------------------------------------------------------- (445) | >|5.284624748| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\autorun.inf >| |(43076) ----------------------------------------------------------> (445) | >|5.284705113| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.285094232| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.285226116| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43076) <---------------------------------------------------------- (445) | >|5.285448150| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43076) ----------------------------------------------------------> (445) | >|5.285515522| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\BDSVM >| |(54504) --------------------------------------> (445) | | >|5.285653542| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43076) ----------------------------------------------------------> (445) | >|5.285975792| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43076) <---------------------------------------------------------- (445) | >|5.286053406| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.286263482| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43076) ----------------------------------------------------------> (445) | >|5.286363692| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43076) <---------------------------------------------------------- (445) | >|5.286780519| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43076) <---------------------------------------------------------- (445) | >|5.286981035| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43076) ----------------------------------------------------------> (445) | >|5.287207118| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43076) ----------------------------------------------------------> (445) | >|5.287798345| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.287910581| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43076) ----------------------------------------------------------> (445) | >|5.288244002| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.288434849| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43076) ----------------------------------------------------------> (445) | >|5.288772259| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.289223767| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43076) <---------------------------------------------------------- (445) | >|5.289334497| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43076) ----------------------------------------------------------> (445) | >|5.289482552| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43076) ----------------------------------------------------------> (445) | >|5.289935941| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43076) <---------------------------------------------------------- (445) | >|5.290051407| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\BDSVM >| |(43076) ----------------------------------------------------------> (445) | >|5.290253995| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43076) <---------------------------------------------------------- (445) | >|5.290394386| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43076) ----------------------------------------------------------> (445) | >|5.290658455| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43076) <---------------------------------------------------------- (445) | >|5.290768720| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43076) ----------------------------------------------------------> (445) | >|5.291214075| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43076) <---------------------------------------------------------- (445) | >|5.291359359| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43076) ----------------------------------------------------------> (445) | >|5.291644543| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43076) <---------------------------------------------------------- (445) | >|5.292233194| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43076) <---------------------------------------------------------- (445) | >|5.292393772| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43076) ----------------------------------------------------------> (445) | >|5.292869274| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\BDMV >| |(54504) --------------------------------------> (445) | | >|5.293100196| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43076) <---------------------------------------------------------- (445) | >|5.293487379| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.293829866| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\BDMV >| |(54504) --------------------------------------> (445) | | >|5.294035132| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|5.294537810| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.294689031| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43074) ----------------------------------------------------------> (445) | >|5.294929131| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|5.295298680| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|5.295890974| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|5.296027149| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43074) ----------------------------------------------------------> (445) | >|5.758332494| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|5.759286342| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|8.276066603| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43074) <---------------------------------------------------------- (445) | >|8.276375145| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43074) ----------------------------------------------------------> (445) | >|8.276763706| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43074) ----------------------------------------------------------> (445) | >|8.277239934| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.277382981| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43074) ----------------------------------------------------------> (445) | >|8.279661020| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.279953657| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43074) ----------------------------------------------------------> (445) | >|8.280874122| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43074) <---------------------------------------------------------- (445) | >|8.281112079| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43074) ----------------------------------------------------------> (445) | >|8.281237247| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.281433238| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43074) ----------------------------------------------------------> (445) | >|8.281776285| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43074) ----------------------------------------------------------> (445) | >|8.282039596| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43074) <---------------------------------------------------------- (445) | >|8.282218216| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43074) ----------------------------------------------------------> (445) | >|8.282506342| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.282844902| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43074) ----------------------------------------------------------> (445) | >|8.282997293| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43074) <---------------------------------------------------------- (445) | >|8.283290498| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43074) ----------------------------------------------------------> (445) | >|8.283478240| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.283655095| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43074) ----------------------------------------------------------> (445) | >|8.283885299| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43074) <---------------------------------------------------------- (445) | >|8.284211597| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43074) ----------------------------------------------------------> (445) | >|8.284373477| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43074) <---------------------------------------------------------- (445) | >|8.284609950| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43074) ----------------------------------------------------------> (445) | >|8.284759126| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43074) <---------------------------------------------------------- (445) | >|8.284870272| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.xdg-volume-info >| |(43074) ----------------------------------------------------------> (445) | >|8.285205688| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43074) <---------------------------------------------------------- (445) | >|8.285333486| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43074) ----------------------------------------------------------> (445) | >|8.285594399| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.285673743| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43074) ----------------------------------------------------------> (445) | >|8.285832776| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43074) <---------------------------------------------------------- (445) | >|8.285982582| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43074) ----------------------------------------------------------> (445) | >|8.286220500| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.286433690| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43074) ----------------------------------------------------------> (445) | >|8.286613660| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43074) <---------------------------------------------------------- (445) | >|8.286738435| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43074) ----------------------------------------------------------> (445) | >|8.286940057| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43074) <---------------------------------------------------------- (445) | >|8.286987845| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43074) ----------------------------------------------------------> (445) | >|8.287321575| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43074) <---------------------------------------------------------- (445) | >|8.287443999| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43074) <---------------------------------------------------------- (445) | >|8.287629858| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\BDMV >| |(43074) ----------------------------------------------------------> (445) | >|8.287863723| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43074) ----------------------------------------------------------> (445) | >|8.287901411| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.288298210| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43074) <---------------------------------------------------------- (445) | >|8.288647315| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43074) <---------------------------------------------------------- (445) | >|8.288913926| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43074) ----------------------------------------------------------> (445) | >|8.289166889| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43074) ----------------------------------------------------------> (445) | >|8.289449640| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.289859335| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|8.289867443| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43074) <---------------------------------------------------------- (445) | >|8.290262734| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43074) ----------------------------------------------------------> (445) | >|8.290630389| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|8.290823615| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|8.290918288| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43074) <---------------------------------------------------------- (445) | >|8.291257665| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\BDMV >| |(54504) --------------------------------------> (445) | | >|8.291683414| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|8.292162246| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|8.292437530| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\BDMV >| |(54504) --------------------------------------> (445) | | >|8.293763300| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|8.294475791| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43077) ----------------------------------------------------------> (445) | >|8.295279286| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43078) ----------------------------------------------------------> (445) | >|8.295473798| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43077) <---------------------------------------------------------- (445) | >|8.295729465| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43077) ----------------------------------------------------------> (445) | >|8.296202049| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43078) <---------------------------------------------------------- (445) | >|8.296488135| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43078) ----------------------------------------------------------> (445) | >|8.296596310| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43077) <---------------------------------------------------------- (445) | >|8.296769370| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43077) ----------------------------------------------------------> (445) | >|8.297341180| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43078) <---------------------------------------------------------- (445) | >|8.297487957| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43078) ----------------------------------------------------------> (445) | >|8.300208927| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43077) <---------------------------------------------------------- (445) | >|8.300440186| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43077) ----------------------------------------------------------> (445) | >|8.301360456| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43077) <---------------------------------------------------------- (445) | >|8.301505915| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43078) <---------------------------------------------------------- (445) | >|8.301612158| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43078) ----------------------------------------------------------> (445) | >|8.301657103| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43077) ----------------------------------------------------------> (445) | >|8.302286392| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43078) <---------------------------------------------------------- (445) | >|8.302322046| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43077) <---------------------------------------------------------- (445) | >|8.302409370| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43077) ----------------------------------------------------------> (445) | >|8.302497604| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43078) ----------------------------------------------------------> (445) | >|8.303080272| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43077) <---------------------------------------------------------- (445) | >|8.303115798| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43078) <---------------------------------------------------------- (445) | >|8.303178352| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43077) ----------------------------------------------------------> (445) | >|8.303249873| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43078) ----------------------------------------------------------> (445) | >|8.303865977| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43078) <---------------------------------------------------------- (445) | >|8.303900899| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43077) <---------------------------------------------------------- (445) | >|8.304000137| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43077) ----------------------------------------------------------> (445) | >|8.304072358| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43078) ----------------------------------------------------------> (445) | >|8.304576185| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43077) <---------------------------------------------------------- (445) | >|8.304611599| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43078) <---------------------------------------------------------- (445) | >|8.304763626| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43077) ----------------------------------------------------------> (445) | >|8.304859303| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43078) ----------------------------------------------------------> (445) | >|8.305460080| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43078) <---------------------------------------------------------- (445) | >|8.305494709| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43077) <---------------------------------------------------------- (445) | >|8.305577605| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43077) ----------------------------------------------------------> (445) | >|8.305654532| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\BDMV >| |(43078) ----------------------------------------------------------> (445) | >|8.306137887| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43077) <---------------------------------------------------------- (445) | >|8.306250697| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43078) <---------------------------------------------------------- (445) | >|8.306364097| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43077) ----------------------------------------------------------> (445) | >|8.306432029| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43078) ----------------------------------------------------------> (445) | >|8.307126054| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43078) <---------------------------------------------------------- (445) | >|8.307161516| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43077) <---------------------------------------------------------- (445) | >|8.307291209| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43078) ----------------------------------------------------------> (445) | >|8.308000952| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43078) <---------------------------------------------------------- (445) | >|9.797197931| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|9.798474465| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|9.798752588| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|9.799922887| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|9.803231219| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43079) ----------------------------------------------------------> (445) | >|9.804872794| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43079) <---------------------------------------------------------- (445) | >|9.805617140| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43079) ----------------------------------------------------------> (445) | >|9.810096116| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43079) <---------------------------------------------------------- (445) | >|9.810266449| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43079) ----------------------------------------------------------> (445) | >|9.816089842| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43079) <---------------------------------------------------------- (445) | >|9.816462229| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43079) ----------------------------------------------------------> (445) | >|9.827443814| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43079) <---------------------------------------------------------- (445) | >|9.827909019| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43079) ----------------------------------------------------------> (445) | >|9.830511279| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43079) <---------------------------------------------------------- (445) | >|9.830887774| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43079) ----------------------------------------------------------> (445) | >|9.836809689| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43079) <---------------------------------------------------------- (445) | >|9.837040764| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43079) ----------------------------------------------------------> (445) | >|9.837921455| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43079) <---------------------------------------------------------- (445) | >|9.838058400| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43079) ----------------------------------------------------------> (445) | >|9.838719092| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43079) <---------------------------------------------------------- (445) | >|9.838854628| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43079) ----------------------------------------------------------> (445) | >|9.839543210| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43079) <---------------------------------------------------------- (445) | >|9.839684992| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43079) ----------------------------------------------------------> (445) | >|9.840446872| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43079) <---------------------------------------------------------- (445) | >|9.840591431| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43079) ----------------------------------------------------------> (445) | >|9.845691333| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43079) <---------------------------------------------------------- (445) | >|9.846027515| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|9.846918367| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|9.847145160| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|9.848204533| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|9.849657161| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43080) ----------------------------------------------------------> (445) | >|9.851225718| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43080) <---------------------------------------------------------- (445) | >|9.851397047| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43080) ----------------------------------------------------------> (445) | >|9.852538436| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43080) <---------------------------------------------------------- (445) | >|9.852693528| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43080) ----------------------------------------------------------> (445) | >|9.855285805| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43080) <---------------------------------------------------------- (445) | >|9.855323676| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43080) ----------------------------------------------------------> (445) | >|9.856080577| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43080) <---------------------------------------------------------- (445) | >|9.856159970| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43080) ----------------------------------------------------------> (445) | >|9.856788416| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43080) <---------------------------------------------------------- (445) | >|9.856892977| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43080) ----------------------------------------------------------> (445) | >|9.857653217| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43080) <---------------------------------------------------------- (445) | >|9.857733477| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43080) ----------------------------------------------------------> (445) | >|9.858451672| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43080) <---------------------------------------------------------- (445) | >|9.858578427| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43080) ----------------------------------------------------------> (445) | >|9.859480887| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43080) <---------------------------------------------------------- (445) | >|9.859589820| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43080) ----------------------------------------------------------> (445) | >|9.860290113| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43080) <---------------------------------------------------------- (445) | >|9.860358258| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43080) ----------------------------------------------------------> (445) | >|9.860935678| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43080) <---------------------------------------------------------- (445) | >|9.861018190| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43080) ----------------------------------------------------------> (445) | >|9.861951965| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43080) <---------------------------------------------------------- (445) | >|10.397758696| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.399162048| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.399353715| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 >| |(54504) --------------------------------------> (445) | | >|10.400395808| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|10.413858765| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.415118391| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.421740375| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.422480266| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.430102009| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.431088695| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.437805018| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.438750763| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.445869628| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.446650865| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.453852492| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.454638034| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.469865924| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.470690342| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.477866860| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.478789515| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.485770486| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.487272674| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.493693360| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.494413004| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.509751048| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.510654989| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.525944961| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.526962507| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.714455369| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|10.715565320| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|10.748297191| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.749342089| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.751075994| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.751858408| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.767436607| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.768325753| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.974443934| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.975411626| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.981811230| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.982582881| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.989893194| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.990703537| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|10.997676371| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|10.998590251| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|11.005813541| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|11.006587081| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|13.796998083| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|13.798083707| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|13.799148929| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|13.799923173| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|13.802142892| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43081) ----------------------------------------------------------> (445) | >|13.803425293| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43081) <---------------------------------------------------------- (445) | >|13.803726144| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43081) ----------------------------------------------------------> (445) | >|13.804763446| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43081) <---------------------------------------------------------- (445) | >|13.804951639| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43081) ----------------------------------------------------------> (445) | >|13.815042826| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43081) <---------------------------------------------------------- (445) | >|13.815233643| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43081) ----------------------------------------------------------> (445) | >|13.816116315| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43081) <---------------------------------------------------------- (445) | >|13.816276799| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43081) ----------------------------------------------------------> (445) | >|13.817089159| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43081) <---------------------------------------------------------- (445) | >|13.817300273| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43081) ----------------------------------------------------------> (445) | >|13.818382778| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43081) <---------------------------------------------------------- (445) | >|13.818622563| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43081) ----------------------------------------------------------> (445) | >|13.819545223| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43081) <---------------------------------------------------------- (445) | >|13.819776155| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43081) ----------------------------------------------------------> (445) | >|13.820597807| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43081) <---------------------------------------------------------- (445) | >|13.820799566| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43081) ----------------------------------------------------------> (445) | >|13.821671170| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43081) <---------------------------------------------------------- (445) | >|13.821849394| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43081) ----------------------------------------------------------> (445) | >|13.822504542| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43081) <---------------------------------------------------------- (445) | >|13.822698893| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43081) ----------------------------------------------------------> (445) | >|13.823425377| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43081) <---------------------------------------------------------- (445) | >|13.823979550| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|13.824647889| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|13.824916754| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|13.825823578| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|13.827501274| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43082) ----------------------------------------------------------> (445) | >|13.828732756| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43082) <---------------------------------------------------------- (445) | >|13.829057453| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43082) ----------------------------------------------------------> (445) | >|13.830000772| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43082) <---------------------------------------------------------- (445) | >|13.830242261| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43082) ----------------------------------------------------------> (445) | >|13.832906620| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43082) <---------------------------------------------------------- (445) | >|13.833173401| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43082) ----------------------------------------------------------> (445) | >|13.833880264| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43082) <---------------------------------------------------------- (445) | >|13.834105312| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43082) ----------------------------------------------------------> (445) | >|13.834767227| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43082) <---------------------------------------------------------- (445) | >|13.835000826| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43082) ----------------------------------------------------------> (445) | >|13.835645564| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43082) <---------------------------------------------------------- (445) | >|13.835864224| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43082) ----------------------------------------------------------> (445) | >|13.836554971| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43082) <---------------------------------------------------------- (445) | >|13.836741029| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43082) ----------------------------------------------------------> (445) | >|13.837373378| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43082) <---------------------------------------------------------- (445) | >|13.837556312| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43082) ----------------------------------------------------------> (445) | >|13.838288161| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43082) <---------------------------------------------------------- (445) | >|13.838475761| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43082) ----------------------------------------------------------> (445) | >|13.839190333| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43082) <---------------------------------------------------------- (445) | >|13.839383113| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43082) ----------------------------------------------------------> (445) | >|13.840188321| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43082) <---------------------------------------------------------- (445) | >|16.583539691| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 >| |(54504) --------------------------------------> (445) | | >|16.587087844| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|16.700163196| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|16.701116822| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|17.795216916| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|17.796167888| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|17.796486424| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|17.797766436| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|17.800547155| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43083) ----------------------------------------------------------> (445) | >|17.801836861| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43083) <---------------------------------------------------------- (445) | >|17.802152189| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43083) ----------------------------------------------------------> (445) | >|17.803375460| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43083) <---------------------------------------------------------- (445) | >|17.803545996| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43083) ----------------------------------------------------------> (445) | >|17.806811956| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43083) <---------------------------------------------------------- (445) | >|17.806950960| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43083) ----------------------------------------------------------> (445) | >|17.807948868| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43083) <---------------------------------------------------------- (445) | >|17.808027839| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43083) ----------------------------------------------------------> (445) | >|17.809027167| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43083) <---------------------------------------------------------- (445) | >|17.809116492| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43083) ----------------------------------------------------------> (445) | >|17.809922376| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43083) <---------------------------------------------------------- (445) | >|17.810007155| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43083) ----------------------------------------------------------> (445) | >|17.810769852| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43083) <---------------------------------------------------------- (445) | >|17.810848618| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43083) ----------------------------------------------------------> (445) | >|17.811545565| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43083) <---------------------------------------------------------- (445) | >|17.811626013| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43083) ----------------------------------------------------------> (445) | >|17.812455415| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43083) <---------------------------------------------------------- (445) | >|17.812526238| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43083) ----------------------------------------------------------> (445) | >|17.813261307| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43083) <---------------------------------------------------------- (445) | >|17.813335657| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43083) ----------------------------------------------------------> (445) | >|17.814124445| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43083) <---------------------------------------------------------- (445) | >|17.814550265| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|17.815515717| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|17.815630105| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|17.816446783| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|17.818178052| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43084) ----------------------------------------------------------> (445) | >|17.819037007| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43084) <---------------------------------------------------------- (445) | >|17.819211054| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43084) ----------------------------------------------------------> (445) | >|17.819999707| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43084) <---------------------------------------------------------- (445) | >|17.820096428| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43084) ----------------------------------------------------------> (445) | >|17.822906633| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43084) <---------------------------------------------------------- (445) | >|17.823024387| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43084) ----------------------------------------------------------> (445) | >|17.823776084| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43084) <---------------------------------------------------------- (445) | >|17.823869894| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43084) ----------------------------------------------------------> (445) | >|17.824580111| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43084) <---------------------------------------------------------- (445) | >|17.824667266| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43084) ----------------------------------------------------------> (445) | >|17.825456657| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43084) <---------------------------------------------------------- (445) | >|17.825532927| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43084) ----------------------------------------------------------> (445) | >|17.826255678| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43084) <---------------------------------------------------------- (445) | >|17.826330635| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43084) ----------------------------------------------------------> (445) | >|17.826998969| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43084) <---------------------------------------------------------- (445) | >|17.827076589| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43084) ----------------------------------------------------------> (445) | >|17.827777368| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43084) <---------------------------------------------------------- (445) | >|17.827854901| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43084) ----------------------------------------------------------> (445) | >|17.828579443| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43084) <---------------------------------------------------------- (445) | >|17.828676845| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43084) ----------------------------------------------------------> (445) | >|17.829484511| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43084) <---------------------------------------------------------- (445) | >|19.861482013| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 >| |(54504) --------------------------------------> (445) | | >|19.862351842| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|19.873710036| Trans2 Request, FIND_FIRST2, Pattern: \\ | |SMB: Trans2 Request, FIND_FIRST2, Pattern: \\WDC3\dir1\dir2\dir3\* >| |(54504) --------------------------------------> (445) | | >|19.874521904| Trans2 Response, FIND_FIRST2, Error: STA | |SMB: Trans2 Response, FIND_FIRST2, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|21.797353368| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|21.798509654| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|21.798797327| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|21.799590600| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|21.802411651| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43085) ----------------------------------------------------------> (445) | >|21.803749630| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43085) <---------------------------------------------------------- (445) | >|21.804048826| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43085) ----------------------------------------------------------> (445) | >|21.805161102| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43085) <---------------------------------------------------------- (445) | >|21.805314997| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43085) ----------------------------------------------------------> (445) | >|21.809001136| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43085) <---------------------------------------------------------- (445) | >|21.809112165| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43085) ----------------------------------------------------------> (445) | >|21.810052386| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43085) <---------------------------------------------------------- (445) | >|21.810159141| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43085) ----------------------------------------------------------> (445) | >|21.810870224| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43085) <---------------------------------------------------------- (445) | >|21.810957069| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43085) ----------------------------------------------------------> (445) | >|21.811813289| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43085) <---------------------------------------------------------- (445) | >|21.811907983| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43085) ----------------------------------------------------------> (445) | >|21.812647440| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43085) <---------------------------------------------------------- (445) | >|21.812732871| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43085) ----------------------------------------------------------> (445) | >|21.813510755| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43085) <---------------------------------------------------------- (445) | >|21.813610694| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43085) ----------------------------------------------------------> (445) | >|21.814366910| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43085) <---------------------------------------------------------- (445) | >|21.814474526| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43085) ----------------------------------------------------------> (445) | >|21.815139012| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43085) <---------------------------------------------------------- (445) | >|21.815377762| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43085) ----------------------------------------------------------> (445) | >|21.816096753| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43085) <---------------------------------------------------------- (445) | >|21.816636465| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|21.817402967| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|21.817517019| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|21.818306954| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|21.819914064| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43086) ----------------------------------------------------------> (445) | >|21.820838954| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43086) <---------------------------------------------------------- (445) | >|21.821002951| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43086) ----------------------------------------------------------> (445) | >|21.821773570| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43086) <---------------------------------------------------------- (445) | >|21.821868513| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43086) ----------------------------------------------------------> (445) | >|21.824735971| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43086) <---------------------------------------------------------- (445) | >|21.824818054| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43086) ----------------------------------------------------------> (445) | >|21.825684321| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43086) <---------------------------------------------------------- (445) | >|21.825757411| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43086) ----------------------------------------------------------> (445) | >|21.826432218| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43086) <---------------------------------------------------------- (445) | >|21.826496927| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43086) ----------------------------------------------------------> (445) | >|21.827455661| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43086) <---------------------------------------------------------- (445) | >|21.827542641| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43086) ----------------------------------------------------------> (445) | >|21.828250360| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43086) <---------------------------------------------------------- (445) | >|21.828308720| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43086) ----------------------------------------------------------> (445) | >|21.829037726| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43086) <---------------------------------------------------------- (445) | >|21.829116358| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43086) ----------------------------------------------------------> (445) | >|21.829937910| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43086) <---------------------------------------------------------- (445) | >|21.830022782| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43086) ----------------------------------------------------------> (445) | >|21.830748304| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43086) <---------------------------------------------------------- (445) | >|21.830827112| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43086) ----------------------------------------------------------> (445) | >|21.831547680| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43086) <---------------------------------------------------------- (445) | >|25.797149746| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|25.798131967| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|25.798456281| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|25.799405430| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|25.801964398| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43087) ----------------------------------------------------------> (445) | >|25.803117662| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43087) <---------------------------------------------------------- (445) | >|25.803431329| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43087) ----------------------------------------------------------> (445) | >|25.804444922| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43087) <---------------------------------------------------------- (445) | >|25.804640808| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43087) ----------------------------------------------------------> (445) | >|25.807462048| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43087) <---------------------------------------------------------- (445) | >|25.807618195| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43087) ----------------------------------------------------------> (445) | >|25.808299934| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43087) <---------------------------------------------------------- (445) | >|25.808456710| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43087) ----------------------------------------------------------> (445) | >|25.809245771| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43087) <---------------------------------------------------------- (445) | >|25.809352077| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43087) ----------------------------------------------------------> (445) | >|25.810578838| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43087) <---------------------------------------------------------- (445) | >|25.810686351| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43087) ----------------------------------------------------------> (445) | >|25.811466154| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43087) <---------------------------------------------------------- (445) | >|25.811587347| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43087) ----------------------------------------------------------> (445) | >|25.812240129| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43087) <---------------------------------------------------------- (445) | >|25.812357105| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43087) ----------------------------------------------------------> (445) | >|25.813058659| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43087) <---------------------------------------------------------- (445) | >|25.813152378| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43087) ----------------------------------------------------------> (445) | >|25.813700779| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43087) <---------------------------------------------------------- (445) | >|25.813814972| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43087) ----------------------------------------------------------> (445) | >|25.814652240| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43087) <---------------------------------------------------------- (445) | >|25.815085789| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|25.815925434| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|25.816036995| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|25.816859806| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|25.818500256| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43088) ----------------------------------------------------------> (445) | >|25.819484113| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43088) <---------------------------------------------------------- (445) | >|25.819720810| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43088) ----------------------------------------------------------> (445) | >|25.820568818| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43088) <---------------------------------------------------------- (445) | >|25.820704844| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43088) ----------------------------------------------------------> (445) | >|25.822940206| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43088) <---------------------------------------------------------- (445) | >|25.823074447| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43088) ----------------------------------------------------------> (445) | >|25.823751492| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43088) <---------------------------------------------------------- (445) | >|25.823876317| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43088) ----------------------------------------------------------> (445) | >|25.824514342| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43088) <---------------------------------------------------------- (445) | >|25.824613104| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43088) ----------------------------------------------------------> (445) | >|25.825412150| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43088) <---------------------------------------------------------- (445) | >|25.825535560| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43088) ----------------------------------------------------------> (445) | >|25.826175957| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43088) <---------------------------------------------------------- (445) | >|25.826291786| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43088) ----------------------------------------------------------> (445) | >|25.826980554| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43088) <---------------------------------------------------------- (445) | >|25.827084818| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43088) ----------------------------------------------------------> (445) | >|25.827748582| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43088) <---------------------------------------------------------- (445) | >|25.827853708| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43088) ----------------------------------------------------------> (445) | >|25.828705595| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43088) <---------------------------------------------------------- (445) | >|25.828810030| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43088) ----------------------------------------------------------> (445) | >|25.829438658| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43088) <---------------------------------------------------------- (445) | >|29.797222453| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|29.798273398| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|29.798552366| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|29.799452395| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|29.801925398| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43089) ----------------------------------------------------------> (445) | >|29.802972108| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43089) <---------------------------------------------------------- (445) | >|29.803229393| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43089) ----------------------------------------------------------> (445) | >|29.804184093| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43089) <---------------------------------------------------------- (445) | >|29.804321617| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43089) ----------------------------------------------------------> (445) | >|29.808166043| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43089) <---------------------------------------------------------- (445) | >|29.808311135| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43089) ----------------------------------------------------------> (445) | >|29.809163657| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43089) <---------------------------------------------------------- (445) | >|29.809493077| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43089) ----------------------------------------------------------> (445) | >|29.810319318| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43089) <---------------------------------------------------------- (445) | >|29.810577678| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43089) ----------------------------------------------------------> (445) | >|29.811565426| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43089) <---------------------------------------------------------- (445) | >|29.811810049| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43089) ----------------------------------------------------------> (445) | >|29.812551612| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43089) <---------------------------------------------------------- (445) | >|29.812778461| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43089) ----------------------------------------------------------> (445) | >|29.813501473| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43089) <---------------------------------------------------------- (445) | >|29.813620076| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43089) ----------------------------------------------------------> (445) | >|29.814369052| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43089) <---------------------------------------------------------- (445) | >|29.814676107| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43089) ----------------------------------------------------------> (445) | >|29.815369248| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43089) <---------------------------------------------------------- (445) | >|29.815681123| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43089) ----------------------------------------------------------> (445) | >|29.816436847| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43089) <---------------------------------------------------------- (445) | >|29.817131491| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|29.817940891| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|29.818034274| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|29.819146682| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|29.820913483| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43090) ----------------------------------------------------------> (445) | >|29.821912589| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43090) <---------------------------------------------------------- (445) | >|29.822116413| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43090) ----------------------------------------------------------> (445) | >|29.823090389| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43090) <---------------------------------------------------------- (445) | >|29.823201404| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43090) ----------------------------------------------------------> (445) | >|29.825685464| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43090) <---------------------------------------------------------- (445) | >|29.825801365| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43090) ----------------------------------------------------------> (445) | >|29.826605539| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43090) <---------------------------------------------------------- (445) | >|29.826692538| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43090) ----------------------------------------------------------> (445) | >|29.827665191| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43090) <---------------------------------------------------------- (445) | >|29.827750479| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43090) ----------------------------------------------------------> (445) | >|29.828545577| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43090) <---------------------------------------------------------- (445) | >|29.828664941| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43090) ----------------------------------------------------------> (445) | >|29.829391126| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43090) <---------------------------------------------------------- (445) | >|29.829471678| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43090) ----------------------------------------------------------> (445) | >|29.830163646| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43090) <---------------------------------------------------------- (445) | >|29.830270485| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43090) ----------------------------------------------------------> (445) | >|29.831098115| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43090) <---------------------------------------------------------- (445) | >|29.831205461| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43090) ----------------------------------------------------------> (445) | >|29.831981622| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43090) <---------------------------------------------------------- (445) | >|29.832090294| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43090) ----------------------------------------------------------> (445) | >|29.832851402| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43090) <---------------------------------------------------------- (445) | >|30.069911376| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|30.070820763| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|30.071282227| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3 >| |(54504) --------------------------------------> (445) | | >|30.072208117| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|30.072749762| Trans2 Request, QUERY_FS_INFO, Query FS | |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Size Info >| |(54504) --------------------------------------> (445) | | >|30.073507764| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(54504) <-------------------------------------- (445) | | >|33.797695283| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|33.798900989| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|33.799094230| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash-1000 >| |(54504) --------------------------------------> (445) | | >|33.799991237| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|33.802471256| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43091) ----------------------------------------------------------> (445) | >|33.803720446| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43091) <---------------------------------------------------------- (445) | >|33.804032383| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43091) ----------------------------------------------------------> (445) | >|33.805206713| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43091) <---------------------------------------------------------- (445) | >|33.805454555| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43091) ----------------------------------------------------------> (445) | >|33.809079622| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43091) <---------------------------------------------------------- (445) | >|33.809303611| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43091) ----------------------------------------------------------> (445) | >|33.810312711| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43091) <---------------------------------------------------------- (445) | >|33.810536168| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43091) ----------------------------------------------------------> (445) | >|33.811445657| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43091) <---------------------------------------------------------- (445) | >|33.811659473| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43091) ----------------------------------------------------------> (445) | >|33.812546674| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43091) <---------------------------------------------------------- (445) | >|33.812694700| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43091) ----------------------------------------------------------> (445) | >|33.813511121| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43091) <---------------------------------------------------------- (445) | >|33.813716236| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43091) ----------------------------------------------------------> (445) | >|33.814355566| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43091) <---------------------------------------------------------- (445) | >|33.814538215| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash-1000 >| |(43091) ----------------------------------------------------------> (445) | >|33.815345329| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43091) <---------------------------------------------------------- (445) | >|33.815548481| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43091) ----------------------------------------------------------> (445) | >|33.816387299| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43091) <---------------------------------------------------------- (445) | >|33.816580843| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43091) ----------------------------------------------------------> (445) | >|33.817470054| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43091) <---------------------------------------------------------- (445) | >|33.818083842| Trans2 Request, QUERY_PATH_INFO, Query F | |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|33.818888272| Trans2 Response, QUERY_PATH_INFO, Error: | |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_PATH_NOT_COVERED >| |(54504) <-------------------------------------- (445) | | >|33.818977305| Trans2 Request, GET_DFS_REFERRAL, File: | |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \WDC3\dir1\dir2\dir3\.Trash >| |(54504) --------------------------------------> (445) | | >|33.819837643| Trans2 Response, GET_DFS_REFERRAL | |SMB: Trans2 Response, GET_DFS_REFERRAL >| |(54504) <-------------------------------------- (445) | | >|33.821745452| Negotiate Protocol Request | | |SMB: Negotiate Protocol Request >| |(43092) ----------------------------------------------------------> (445) | >|33.822802214| Negotiate Protocol Response | | |SMB: Negotiate Protocol Response >| |(43092) <---------------------------------------------------------- (445) | >|33.822991384| Session Setup AndX Request, NTLMSSP_NEGOTIATE | |SMB: Session Setup AndX Request, NTLMSSP_NEGOTIATE >| |(43092) ----------------------------------------------------------> (445) | >|33.823906126| Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATU |SMB: Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED >| |(43092) <---------------------------------------------------------- (445) | >|33.824009591| Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netb |SMB: Session Setup AndX Request, NTLMSSP_AUTH, User: EXAMPLE\netbiosname >| |(43092) ----------------------------------------------------------> (445) | >|33.827862655| Session Setup AndX Response | | |SMB: Session Setup AndX Response >| |(43092) <---------------------------------------------------------- (445) | >|33.827977966| Tree Connect AndX Request, Path: \\DFS2\dir0 | |SMB: Tree Connect AndX Request, Path: \\DFS2\dir0 >| |(43092) ----------------------------------------------------------> (445) | >|33.828687335| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43092) <---------------------------------------------------------- (445) | >|33.828793542| Trans2 Request, QUERY_FS_INFO, Query FS Device Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Device Info >| |(43092) ----------------------------------------------------------> (445) | >|33.829580656| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43092) <---------------------------------------------------------- (445) | >|33.829693835| Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info |SMB: Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info >| |(43092) ----------------------------------------------------------> (445) | >|33.830557308| Trans2 Response, QUERY_FS_INFO| | |SMB: Trans2 Response, QUERY_FS_INFO >| |(43092) <---------------------------------------------------------- (445) | >|33.830647915| Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ |SMB: Tree Connect AndX Request, Path: \\10.3.15.157\IPC$ >| |(43092) ----------------------------------------------------------> (445) | >|33.831481286| Tree Connect AndX Response | | |SMB: Tree Connect AndX Response >| |(43092) <---------------------------------------------------------- (445) | >|33.831568376| Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 |SMB: Trans2 Request, GET_DFS_REFERRAL, File: \DFS2\dir0 >| |(43092) ----------------------------------------------------------> (445) | >|33.832253183| Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_R |SMB: Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_FS_DRIVER_REQUIRED >| |(43092) <---------------------------------------------------------- (445) | >|33.832343377| Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: |SMB: Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \\dir3\.Trash >| |(43092) ----------------------------------------------------------> (445) | >|33.833112853| Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_ |SMB: Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND >| |(43092) <---------------------------------------------------------- (445) | >|33.833200605| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(43092) ----------------------------------------------------------> (445) | >|33.833952149| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(43092) <---------------------------------------------------------- (445) | >|33.834041753| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(43092) ----------------------------------------------------------> (445) | >|33.834753972| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(43092) <---------------------------------------------------------- (445) | >|37.705830009| Tree Disconnect Request | | |SMB: Tree Disconnect Request >| |(54504) --------------------------------------> (445) | | >|37.706816043| Tree Disconnect Response | | |SMB: Tree Disconnect Response >| |(54504) <-------------------------------------- (445) | | >|37.706982502| Logoff AndX Request | | |SMB: Logoff AndX Request >| |(54504) --------------------------------------> (445) | | >|37.707600958| Logoff AndX Response | | |SMB: Logoff AndX Response >| |(54504) <-------------------------------------- (445) | |
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=12573">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 12379
: 12573