Network traffic using mount_smbfs: 17.334755 [CLIENT] -> [SERVER] TCP 50081 > netbios-ssn [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460 WS=0 TSV=1016784790 TSER=0 17.334781 [SERVER] -> [CLIENT] TCP netbios-ssn > 50081 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=118878365 TSER=1016784790 WS=0 17.334919 [CLIENT] -> [SERVER] TCP 50081 > netbios-ssn [ACK] Seq=1 Ack=1 Win=65535 Len=0 TSV=1016784790 TSER=118878365 17.334954 [CLIENT] -> [SERVER] NBSS Session request, to SERVER<20> from CLIENT<00> 17.334969 [SERVER] -> [CLIENT] TCP netbios-ssn > 50081 [ACK] Seq=1 Ack=73 Win=5792 Len=0 TSV=118878365 TSER=1016784790 17.336583 [SERVER] -> [CLIENT] NBSS Positive session response 17.336958 [CLIENT] -> [SERVER] SMB Negotiate Protocol Request 17.337143 [SERVER] -> [CLIENT] SMB Negotiate Protocol Response 17.337517 [CLIENT] -> [SERVER] TCP 50081 > netbios-ssn [FIN, ACK] Seq=245 Ack=136 Win=65535 Len=0 TSV=1016784790 TSER=118878366 17.338083 [CLIENT] -> [SERVER] TCP 50082 > netbios-ssn [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460 WS=0 TSV=1016784790 TSER=0 17.338108 [SERVER] -> [CLIENT] TCP netbios-ssn > 50082 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=118878366 TSER=1016784790 WS=0 17.338237 [CLIENT] -> [SERVER] TCP 50082 > netbios-ssn [ACK] Seq=1 Ack=1 Win=65535 Len=0 TSV=1016784790 TSER=118878366 17.338271 [CLIENT] -> [SERVER] NBSS Session request, to SERVER<20> from CLIENT<00> 17.338283 [SERVER] -> [CLIENT] TCP netbios-ssn > 50082 [ACK] Seq=1 Ack=73 Win=5792 Len=0 TSV=118878366 TSER=1016784790 17.339728 [SERVER] -> [CLIENT] NBSS Positive session response 17.339956 [CLIENT] -> [SERVER] SMB Negotiate Protocol Request 17.340188 [SERVER] -> [CLIENT] SMB Negotiate Protocol Response 17.340646 [CLIENT] -> [SERVER] SMB Session Setup AndX Request, User: DOMAINNAME\ 17.340872 [SERVER] -> [CLIENT] SMB Session Setup AndX Response 17.341105 [CLIENT] -> [SERVER] SMB Tree Connect AndX Request, Path: \\SERVER\IPC$ 17.341293 [SERVER] -> [CLIENT] SMB Tree Connect AndX Response 17.342229 [CLIENT] -> [SERVER] SMB NT Create AndX Request, Path: \srvsvc 17.342349 [SERVER] -> [CLIENT] SMB NT Create AndX Response, FID: 0x707f 17.343106 [CLIENT] -> [SERVER] DCERPC Bind: call_id: 1 UUID: SRVSVC 17.343247 [SERVER] -> [CLIENT] DCERPC Fault: call_id: 1 ctx_id: 0 status: nca_op_rng_error 17.346569 [SERVER] -> [CLIENT] TCP netbios-ssn > 50081 [FIN, ACK] Seq=136 Ack=246 Win=5792 Len=0 TSV=118878367 TSER=1016784790 17.434381 [CLIENT] -> [SERVER] TCP 50082 > netbios-ssn [ACK] Seq=713 Ack=475 Win=65535 Len=0 TSV=1016784790 TSER=118878366 17.565625 [SERVER] -> [CLIENT] TCP [TCP Retransmission] netbios-ssn > 50081 [FIN, ACK] Seq=136 Ack=246 Win=5792 Len=0 TSV=118878389 TSER=1016784790 17.565840 [CLIENT] -> [SERVER] TCP 50081 > netbios-ssn [ACK] Seq=246 Ack=137 Win=65535 Len=0 TSV=1016784790 TSER=118878389 Network traffic using smbclient: 7.637186 [CLIENT] -> [SERVER] TCP 50086 > microsoft-ds [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460 WS=0 TSV=1016785345 TSER=0 7.637213 [SERVER] -> [CLIENT] TCP microsoft-ds > 50086 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=118906141 TSER=1016785345 WS=0 7.637409 [CLIENT] -> [SERVER] TCP 50086 > microsoft-ds [ACK] Seq=1 Ack=1 Win=65535 Len=0 TSV=1016785345 TSER=118906141 7.647812 [CLIENT] -> [SERVER] SMB Negotiate Protocol Request 7.647831 [SERVER] -> [CLIENT] TCP microsoft-ds > 50086 [ACK] Seq=1 Ack=184 Win=5792 Len=0 TSV=118906142 TSER=1016785345 7.648078 [SERVER] -> [CLIENT] SMB Negotiate Protocol Response 7.677702 [CLIENT] -> [SERVER] TCP 50086 > microsoft-ds [ACK] Seq=184 Ack=132 Win=65535 Len=0 TSV=1016785345 TSER=118906142 14.640920 [CLIENT] -> [SERVER] SMB Session Setup AndX Request, NTLMSSP_NEGOTIATE 14.641261 [SERVER] -> [CLIENT] SMB Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED 14.642273 [CLIENT] -> [SERVER] SMB Session Setup AndX Request, NTLMSSP_AUTH 14.677123 [SERVER] -> [CLIENT] TCP microsoft-ds > 50086 [ACK] Seq=410 Ack=618 Win=5792 Len=0 TSV=118906846 TSER=1016785359 14.705023 [SERVER] -> [CLIENT] SMB Session Setup AndX Response 14.707836 [CLIENT] -> [SERVER] SMB Tree Connect AndX Request, Path: \\SERVER\PUBLIC 14.707859 [SERVER] -> [CLIENT] TCP microsoft-ds > 50086 [ACK] Seq=538 Ack=704 Win=5792 Len=0 TSV=118906849 TSER=1016785359 14.708351 [SERVER] -> [CLIENT] SMB Tree Connect AndX Response 14.879816 [CLIENT] -> [SERVER] TCP 50086 > microsoft-ds [ACK] Seq=704 Ack=596 Win=65535 Len=0 TSV=1016785360 TSER=118906849 16.120027 [CLIENT] -> [SERVER] SMB Tree Disconnect Request 16.120217 [SERVER] -> [CLIENT] SMB Tree Disconnect Response 16.133284 [CLIENT] -> [SERVER] TCP 50086 > microsoft-ds [FIN, ACK] Seq=743 Ack=635 Win=65535 Len=0 TSV=1016785362 TSER=118906990 16.137754 [SERVER] -> [CLIENT] TCP microsoft-ds > 50086 [FIN, ACK] Seq=635 Ack=744 Win=5792 Len=0 TSV=118906992 TSER=1016785362 16.426877 [SERVER] -> [CLIENT] TCP [TCP Retransmission] microsoft-ds > 50086 [FIN, ACK] Seq=635 Ack=744 Win=5792 Len=0 TSV=118907021 TSER=1016785362 16.427117 [CLIENT] -> [SERVER] TCP 50086 > microsoft-ds [ACK] Seq=744 Ack=636 Win=65535 Len=0 TSV=1016785363 TSER=118907021