Attachment 569 Details for Bug 1519 – network trace of the problem happening

network trace of the problem happening

bug1519_net_trace.txt (text/plain), 208.97 KB, created by Thomas M Steenholdt on 2004-07-14 12:09:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Thomas M Steenholdt

Created: 2004-07-14 12:09:55 UTC

Size: 208.97 KB

patch

obsolete

>tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
>02:33:59.716112 IP (tos 0x0, ttl 128, id 48797, offset 0, flags [none], proto 17, length: 78) 192.168.1.20.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] 
>>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
>TrnID=0x9855
>OpCode=0
>NmFlags=0x11
>Rcode=0
>QueryCount=1
>AnswerCount=0
>AuthorityCount=0
>AddressRecCount=0
>QuestionRecords:
>Name=TEST            NameType=0x20 (Server)
>QuestionType=0x20
>QuestionClass=0x1
>
>
>02:33:59.826843 IP (tos 0x0, ttl 128, id 48797, offset 0, flags [none], proto 17, length: 78) 192.168.1.20.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] 
>>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
>TrnID=0x9855
>OpCode=0
>NmFlags=0x11
>Rcode=0
>QueryCount=1
>AnswerCount=0
>AuthorityCount=0
>AddressRecCount=0
>QuestionRecords:
>Name=TEST            NameType=0x20 (Server)
>QuestionType=0x20
>QuestionClass=0x1
>
>
>02:33:59.724165 IP (tos 0x0, ttl  32, id 48800, offset 0, flags [none], proto 1, length: 60) 192.168.1.20 > 192.168.1.28: icmp 40: echo request seq 11264
>02:33:59.724230 IP (tos 0x0, ttl  64, id 62469, offset 0, flags [none], proto 1, length: 60) 192.168.1.28 > 192.168.1.20: icmp 40: echo reply seq 11264
>02:33:59.725175 IP (tos 0x0, ttl 128, id 48801, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2055504480:2055504480(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:33:59.725985 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2137: S [tcp sum ok] 2781188308:2781188308(0) ack 2055504481 win 5840 <mss 1460,nop,nop,sackOK>
>02:33:59.726196 IP (tos 0x0, ttl 128, id 48802, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:33:59.786425 IP (tos 0x0, ttl 128, id 48803, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:33:59.786470 IP (tos 0x0, ttl  64, id 40027, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2137: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:33:59.938157 IP (tos 0x0, ttl  64, id 40028, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2137: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:33:59.939130 IP (tos 0x0, ttl 128, id 48804, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:33:59.939185 IP (tos 0x0, ttl  64, id 40029, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2137: . [tcp sum ok] 132:132(0) ack 386 win 5840
>02:33:59.963620 IP (tos 0x0, ttl  64, id 40030, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2137: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:33:59.970217 IP (tos 0x0, ttl 128, id 48805, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:33:59.994692 IP (tos 0x0, ttl  64, id 40031, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2137: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:00.003109 IP (tos 0x0, ttl 128, id 48806, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2055607960:2055607960(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:00.003586 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2142: S [tcp sum ok] 2782044640:2782044640(0) ack 2055607961 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:00.004104 IP (tos 0x0, ttl 128, id 48807, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:00.017371 IP (tos 0x0, ttl 128, id 48808, offset 0, flags [DF], proto 6, length: 48) 9.145.199.30.2143 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2055651905:2055651905(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:00.017445 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2143: S [tcp sum ok] 2780239381:2780239381(0) ack 2055651906 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:00.017376 IP (tos 0x0, ttl 128, id 48809, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:00.018443 IP (tos 0x0, ttl  64, id 44101, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2142: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:00.060120 IP (tos 0x0, ttl  64, id 44102, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2142: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:00.061451 IP (tos 0x0, ttl 128, id 48810, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:00.061516 IP (tos 0x0, ttl  64, id 44103, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2142: . [tcp sum ok] 132:132(0) ack 386 win 5840
>02:34:00.069408 IP (tos 0x0, ttl  64, id 44104, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2142: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:00.071280 IP (tos 0x0, ttl 128, id 48811, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:00.078042 IP (tos 0x0, ttl  64, id 44105, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2142: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:00.172050 IP (tos 0x0, ttl 128, id 48812, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:00.268143 IP (tos 0x0, ttl 128, id 48813, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:00.523180 IP (tos 0x0, ttl 128, id 48815, offset 0, flags [none], proto 17, length: 78) 192.168.1.20.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] 
>>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
>TrnID=0x9855
>OpCode=0
>NmFlags=0x11
>Rcode=0
>QueryCount=1
>AnswerCount=0
>AuthorityCount=0
>AddressRecCount=0
>QuestionRecords:
>Name=TEST            NameType=0x20 (Server)
>QuestionType=0x20
>QuestionClass=0x1
>
>
>02:34:00.523184 IP (tos 0x0, ttl 128, id 48815, offset 0, flags [none], proto 17, length: 78) 192.168.1.20.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] 
>>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
>TrnID=0x9855
>OpCode=0
>NmFlags=0x11
>Rcode=0
>QueryCount=1
>AnswerCount=0
>AuthorityCount=0
>AddressRecCount=0
>QuestionRecords:
>Name=TEST            NameType=0x20 (Server)
>QuestionType=0x20
>QuestionClass=0x1
>
>
>02:34:01.250917 IP (tos 0x0, ttl 128, id 48819, offset 0, flags [none], proto 17, length: 78) 192.168.1.20.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] 
>>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
>TrnID=0x9855
>OpCode=0
>NmFlags=0x11
>Rcode=0
>QueryCount=1
>AnswerCount=0
>AuthorityCount=0
>AddressRecCount=0
>QuestionRecords:
>Name=TEST            NameType=0x20 (Server)
>QuestionType=0x20
>QuestionClass=0x1
>
>
>02:34:01.250919 IP (tos 0x0, ttl 128, id 48819, offset 0, flags [none], proto 17, length: 78) 192.168.1.20.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] 
>>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
>TrnID=0x9855
>OpCode=0
>NmFlags=0x11
>Rcode=0
>QueryCount=1
>AnswerCount=0
>AuthorityCount=0
>AddressRecCount=0
>QuestionRecords:
>Name=TEST            NameType=0x20 (Server)
>QuestionType=0x20
>QuestionClass=0x1
>
>
>02:34:02.031140 IP (tos 0x0, ttl 128, id 48822, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:02.044660 IP (tos 0x0, ttl  64, id 40032, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2137: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:02.044949 IP (tos 0x0, ttl 128, id 48823, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2137 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:02.050096 IP (tos 0x0, ttl 128, id 48824, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2144 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2056188300:2056188300(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:02.050140 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2144: S [tcp sum ok] 2781212374:2781212374(0) ack 2056188301 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:02.050665 IP (tos 0x0, ttl 128, id 48825, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2144 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:02.070838 IP (tos 0x0, ttl 128, id 48826, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2144 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:02.070883 IP (tos 0x0, ttl  64, id 64372, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2144: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:02.110402 IP (tos 0x0, ttl  64, id 64373, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2144: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:02.111799 IP (tos 0x0, ttl 128, id 48827, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2144 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:02.112260 IP (tos 0x0, ttl  64, id 64374, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2144: . [tcp sum ok] 132:132(0) ack 386 win 5840
>02:34:02.131284 IP (tos 0x0, ttl  64, id 64375, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2144: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:02.136324 IP (tos 0x0, ttl 128, id 48828, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2144 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:02.161404 IP (tos 0x0, ttl  64, id 64376, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2144: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:02.171300 IP (tos 0x0, ttl 128, id 48829, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2144 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:02.204850 IP (tos 0x0, ttl  64, id 64377, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2144: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:02.205629 IP (tos 0x0, ttl 128, id 48830, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2144 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:02.216843 IP (tos 0x0, ttl 128, id 48831, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2145 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2056328367:2056328367(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:02.216891 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2145: S [tcp sum ok] 2779019626:2779019626(0) ack 2056328368 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:02.216846 IP (tos 0x0, ttl 128, id 48832, offset 0, flags [DF], proto 6, length: 48) 9.145.199.30.2146 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2056388709:2056388709(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:02.217756 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2146: S [tcp sum ok] 2786981487:2786981487(0) ack 2056388710 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:02.217603 IP (tos 0x0, ttl 128, id 48833, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2145 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:02.233014 IP (tos 0x0, ttl 128, id 48834, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2145 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:02.233059 IP (tos 0x0, ttl  64, id 28448, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2145: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:02.316793 IP (tos 0x0, ttl  64, id 28449, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2145: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:02.318026 IP (tos 0x0, ttl 128, id 48835, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2145 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:02.318090 IP (tos 0x0, ttl  64, id 28450, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2145: . [tcp sum ok] 132:132(0) ack 386 win 5840
>02:34:02.340481 IP (tos 0x0, ttl  64, id 28451, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2145: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:02.346217 IP (tos 0x0, ttl 128, id 48836, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2145 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:02.372536 IP (tos 0x0, ttl  64, id 28452, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2145: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:02.378206 IP (tos 0x0, ttl 128, id 48837, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2145 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:02.407340 IP (tos 0x0, ttl  64, id 28453, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2145: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:02.408283 IP (tos 0x0, ttl 128, id 48838, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2145 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:02.417388 IP (tos 0x0, ttl 128, id 48839, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2148 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2056450356:2056450356(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:02.417455 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2148: S [tcp sum ok] 2779436495:2779436495(0) ack 2056450357 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:02.417564 IP (tos 0x0, ttl 128, id 48840, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2148 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:02.455716 IP (tos 0x0, ttl 128, id 48841, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2148 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:02.455820 IP (tos 0x0, ttl  64, id 49858, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2148: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:02.460883 IP (tos 0x0, ttl  64, id 49859, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2148: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:02.463527 IP (tos 0x0, ttl 128, id 48842, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2148 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:02.469129 IP (tos 0x0, ttl  64, id 49860, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2148: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:02.471526 IP (tos 0x0, ttl 128, id 48843, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2148 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:02.479041 IP (tos 0x0, ttl  64, id 49861, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2148: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:02.483322 IP (tos 0x0, ttl 128, id 48844, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2148 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:02.494146 IP (tos 0x0, ttl  64, id 49862, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2148: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:02.494418 IP (tos 0x0, ttl 128, id 48845, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2148 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:02.868432 IP (tos 0x0, ttl 128, id 48846, offset 0, flags [DF], proto 6, length: 48) 9.145.199.30.2143 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2055651905:2055651905(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:02.868518 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2143: S [tcp sum ok] 2780239381:2780239381(0) ack 2055651906 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:03.258071 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2143: S [tcp sum ok] 2780239381:2780239381(0) ack 2055651906 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:05.016798 arp who-has 192.168.1.1 tell 192.168.1.28
>02:34:05.025251 arp reply 192.168.1.1 is-at 00:20:6f:16:4b:df
>02:34:05.258802 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2146: S [tcp sum ok] 2786981487:2786981487(0) ack 2056388710 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:05.409355 IP (tos 0x0, ttl 128, id 48849, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2057233659:2057233659(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:05.409411 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: S [tcp sum ok] 2786116697:2786116697(0) ack 2057233660 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:05.409358 IP (tos 0x0, ttl 128, id 48850, offset 0, flags [DF], proto 6, length: 48) 9.145.199.30.ninstall > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2057293354:2057293354(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:05.410375 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.ninstall: S [tcp sum ok] 2793311935:2793311935(0) ack 2057293355 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:05.409360 IP (tos 0x0, ttl 128, id 48851, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2151 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2057340229:2057340229(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:05.411010 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.1.20.2151: S [tcp sum ok] 2786762616:2786762616(0) ack 2057340230 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:05.409362 IP (tos 0x0, ttl 128, id 48852, offset 0, flags [DF], proto 6, length: 48) 192.168.242.1.2152 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2057386652:2057386652(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:05.411211 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.242.1.2152: S [tcp sum ok] 2786416580:2786416580(0) ack 2057386653 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:05.410340 IP (tos 0x0, ttl 128, id 48853, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:05.411196 IP (tos 0x0, ttl 128, id 48854, offset 0, flags [none], proto 6, length: 40) 192.168.1.20.2151 > 192.168.1.28.netbios-ssn: R [tcp sum ok] 2057340230:2057340230(0) win 0
>02:34:05.440415 IP (tos 0x0, ttl 128, id 48855, offset 0, flags [DF], proto 6, length: 48) 192.168.233.1.2153 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2057461851:2057461851(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:05.440466 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2153: S [tcp sum ok] 2785724549:2785724549(0) ack 2057461852 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:05.440418 IP (tos 0x0, ttl 128, id 48856, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:05.440590 IP (tos 0x0, ttl  64, id 59039, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:05.525860 IP (tos 0x0, ttl  64, id 59040, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:05.527277 IP (tos 0x0, ttl 128, id 48857, offset 0, flags [DF], proto 6, length: 272) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:370(232) ack 132 win 64381
>02:34:05.527317 IP (tos 0x0, ttl  64, id 59041, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 132:132(0) ack 370 win 5840
>02:34:05.549890 IP (tos 0x0, ttl  64, id 59042, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 132:428(296) ack 370 win 5840
>02:34:05.556762 IP (tos 0x0, ttl 128, id 48858, offset 0, flags [DF], proto 6, length: 396) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 370:726(356) ack 428 win 64085
>02:34:05.596768 IP (tos 0x0, ttl  64, id 59043, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 428:428(0) ack 726 win 5840
>02:34:05.819862 IP (tos 0x0, ttl  64, id 59044, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 428:554(126) ack 726 win 5840
>02:34:05.827034 IP (tos 0x0, ttl 128, id 48859, offset 0, flags [DF], proto 6, length: 118) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 726:804(78) ack 554 win 63959
>02:34:05.827109 IP (tos 0x0, ttl  64, id 59045, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 554:554(0) ack 804 win 5840
>02:34:05.849812 IP (tos 0x0, ttl  64, id 59046, offset 0, flags [DF], proto 6, length: 92) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 554:606(52) ack 804 win 5840
>02:34:05.857771 IP (tos 0x0, ttl 128, id 48860, offset 0, flags [DF], proto 6, length: 144) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 804:908(104) ack 606 win 63907
>02:34:05.868741 IP (tos 0x0, ttl  64, id 59047, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 606:713(107) ack 908 win 5840
>02:34:05.870026 IP (tos 0x0, ttl 128, id 48861, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 908:1048(140) ack 713 win 63800
>02:34:05.882768 IP (tos 0x0, ttl  64, id 59048, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 713:764(51) ack 1048 win 5840
>02:34:05.888862 IP (tos 0x0, ttl 128, id 48862, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1048:1111(63) ack 764 win 63749
>02:34:05.895877 IP (tos 0x0, ttl  64, id 59049, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 764:895(131) ack 1111 win 5840
>02:34:05.901774 IP (tos 0x0, ttl 128, id 48863, offset 0, flags [DF], proto 6, length: 212) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1111:1283(172) ack 895 win 63618
>02:34:05.914754 IP (tos 0x0, ttl  64, id 59050, offset 0, flags [DF], proto 6, length: 592) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 895:1447(552) ack 1283 win 5840
>02:34:05.915921 IP (tos 0x0, ttl 128, id 48864, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1283:1328(45) ack 1447 win 64512
>02:34:05.922930 IP (tos 0x0, ttl  64, id 59051, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1447:1486(39) ack 1328 win 5840
>02:34:05.946241 IP (tos 0x0, ttl 128, id 48865, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1328:1328(0) ack 1486 win 64473
>02:34:06.083174 IP (tos 0x0, ttl 128, id 48866, offset 0, flags [DF], proto 6, length: 146) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1328:1434(106) ack 1486 win 64473
>02:34:06.088771 IP (tos 0x0, ttl  64, id 59052, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1486:1593(107) ack 1434 win 5840
>02:34:06.096264 IP (tos 0x0, ttl 128, id 48867, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1434:1574(140) ack 1593 win 64366
>02:34:06.102691 IP (tos 0x0, ttl  64, id 59053, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1593:1644(51) ack 1574 win 5840
>02:34:06.107283 IP (tos 0x0, ttl 128, id 48868, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1574:1637(63) ack 1644 win 64315
>02:34:06.113792 IP (tos 0x0, ttl  64, id 59054, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1644:1775(131) ack 1637 win 5840
>02:34:06.117690 IP (tos 0x0, ttl 128, id 48869, offset 0, flags [DF], proto 6, length: 304) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1637:1901(264) ack 1775 win 64184
>02:34:06.128804 IP (tos 0x0, ttl  64, id 59055, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1775:1883(108) ack 1901 win 5840
>02:34:06.134698 IP (tos 0x0, ttl 128, id 48870, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1901:2033(132) ack 1883 win 64076
>02:34:06.142851 IP (tos 0x0, ttl  64, id 59056, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1883:1991(108) ack 2033 win 5840
>02:34:06.148697 IP (tos 0x0, ttl 128, id 48871, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2033:2078(45) ack 1991 win 63968
>02:34:06.155667 IP (tos 0x0, ttl  64, id 59057, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 1991:2030(39) ack 2078 win 5840
>02:34:06.166701 IP (tos 0x0, ttl 128, id 48872, offset 0, flags [DF], proto 6, length: 144) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2078:2182(104) ack 2030 win 63929
>02:34:06.172763 IP (tos 0x0, ttl  64, id 59058, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2030:2137(107) ack 2182 win 5840
>02:34:06.173955 IP (tos 0x0, ttl 128, id 48873, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2182:2322(140) ack 2137 win 63822
>02:34:06.180822 IP (tos 0x0, ttl  64, id 59059, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2137:2188(51) ack 2322 win 5840
>02:34:06.185678 IP (tos 0x0, ttl 128, id 48874, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2322:2385(63) ack 2188 win 63771
>02:34:06.191762 IP (tos 0x0, ttl  64, id 59060, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2188:2319(131) ack 2385 win 5840
>02:34:06.197617 IP (tos 0x0, ttl 128, id 48875, offset 0, flags [DF], proto 6, length: 188) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2385:2533(148) ack 2319 win 63640
>02:34:06.203714 IP (tos 0x0, ttl  64, id 59061, offset 0, flags [DF], proto 6, length: 220) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2319:2499(180) ack 2533 win 5840
>02:34:06.204850 IP (tos 0x0, ttl 128, id 48876, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2533:2578(45) ack 2499 win 63460
>02:34:06.211822 IP (tos 0x0, ttl  64, id 59062, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2499:2538(39) ack 2578 win 5840
>02:34:06.213537 IP (tos 0x0, ttl 128, id 48877, offset 0, flags [DF], proto 6, length: 144) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2578:2682(104) ack 2538 win 63421
>02:34:06.217879 IP (tos 0x0, ttl  64, id 59063, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2538:2645(107) ack 2682 win 5840
>02:34:06.219041 IP (tos 0x0, ttl 128, id 48878, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2682:2822(140) ack 2645 win 63314
>02:34:06.225882 IP (tos 0x0, ttl  64, id 59064, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2645:2696(51) ack 2822 win 5840
>02:34:06.230263 IP (tos 0x0, ttl 128, id 48879, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2822:2885(63) ack 2696 win 63263
>02:34:06.235854 IP (tos 0x0, ttl  64, id 59065, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2696:2827(131) ack 2885 win 5840
>02:34:06.240664 IP (tos 0x0, ttl 128, id 48880, offset 0, flags [DF], proto 6, length: 188) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 2885:3033(148) ack 2827 win 64512
>02:34:06.248840 IP (tos 0x0, ttl  64, id 59066, offset 0, flags [DF], proto 6, length: 236) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 2827:3023(196) ack 3033 win 5840
>02:34:06.250172 IP (tos 0x0, ttl 128, id 48881, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3033:3078(45) ack 3023 win 64316
>02:34:06.266762 IP (tos 0x0, ttl  64, id 59067, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3023:3062(39) ack 3078 win 5840
>02:34:06.272617 IP (tos 0x0, ttl 128, id 48882, offset 0, flags [DF], proto 6, length: 144) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3078:3182(104) ack 3062 win 64277
>02:34:06.278795 IP (tos 0x0, ttl  64, id 59068, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3062:3169(107) ack 3182 win 5840
>02:34:06.280124 IP (tos 0x0, ttl 128, id 48883, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3182:3322(140) ack 3169 win 64170
>02:34:06.286765 IP (tos 0x0, ttl  64, id 59069, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3169:3220(51) ack 3322 win 5840
>02:34:06.291693 IP (tos 0x0, ttl 128, id 48884, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3322:3385(63) ack 3220 win 64119
>02:34:06.296792 IP (tos 0x0, ttl  64, id 59070, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3220:3351(131) ack 3385 win 5840
>02:34:06.301652 IP (tos 0x0, ttl 128, id 48885, offset 0, flags [DF], proto 6, length: 188) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3385:3533(148) ack 3351 win 63988
>02:34:06.307837 IP (tos 0x0, ttl  64, id 59071, offset 0, flags [DF], proto 6, length: 220) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3351:3531(180) ack 3533 win 5840
>02:34:06.312652 IP (tos 0x0, ttl 128, id 48886, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3533:3578(45) ack 3531 win 63808
>02:34:06.317907 IP (tos 0x0, ttl  64, id 59072, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3531:3570(39) ack 3578 win 5840
>02:34:06.319564 IP (tos 0x0, ttl 128, id 48887, offset 0, flags [DF], proto 6, length: 144) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3578:3682(104) ack 3570 win 63769
>02:34:06.324703 IP (tos 0x0, ttl  64, id 59073, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3570:3677(107) ack 3682 win 5840
>02:34:06.325847 IP (tos 0x0, ttl 128, id 48888, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3682:3822(140) ack 3677 win 63662
>02:34:06.333849 IP (tos 0x0, ttl  64, id 59074, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3677:3728(51) ack 3822 win 5840
>02:34:06.341643 IP (tos 0x0, ttl 128, id 48889, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3822:3885(63) ack 3728 win 63611
>02:34:06.347762 IP (tos 0x0, ttl  64, id 59075, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3728:3859(131) ack 3885 win 5840
>02:34:06.352644 IP (tos 0x0, ttl 128, id 48890, offset 0, flags [DF], proto 6, length: 188) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 3885:4033(148) ack 3859 win 63480
>02:34:06.358695 IP (tos 0x0, ttl  64, id 59076, offset 0, flags [DF], proto 6, length: 236) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 3859:4055(196) ack 4033 win 5840
>02:34:06.359966 IP (tos 0x0, ttl 128, id 48891, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4033:4078(45) ack 4055 win 63284
>02:34:06.367608 IP (tos 0x0, ttl  64, id 59077, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4055:4094(39) ack 4078 win 5840
>02:34:06.368097 IP (tos 0x0, ttl 128, id 48892, offset 0, flags [DF], proto 6, length: 144) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4078:4182(104) ack 4094 win 64512
>02:34:06.376677 IP (tos 0x0, ttl  64, id 59078, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4094:4201(107) ack 4182 win 5840
>02:34:06.377992 IP (tos 0x0, ttl 128, id 48893, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4182:4322(140) ack 4201 win 64405
>02:34:06.385684 IP (tos 0x0, ttl  64, id 59079, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4201:4252(51) ack 4322 win 5840
>02:34:06.390641 IP (tos 0x0, ttl 128, id 48894, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4322:4385(63) ack 4252 win 64354
>02:34:06.397616 IP (tos 0x0, ttl  64, id 59080, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4252:4383(131) ack 4385 win 5840
>02:34:06.402243 IP (tos 0x0, ttl 128, id 48895, offset 0, flags [DF], proto 6, length: 164) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4385:4509(124) ack 4383 win 64223
>02:34:06.412835 IP (tos 0x0, ttl  64, id 59081, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4383:4491(108) ack 4509 win 5840
>02:34:06.414369 IP (tos 0x0, ttl 128, id 48896, offset 0, flags [DF], proto 6, length: 272) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4509:4741(232) ack 4491 win 64115
>02:34:06.422598 IP (tos 0x0, ttl  64, id 59082, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4491:4599(108) ack 4741 win 5840
>02:34:06.423095 IP (tos 0x0, ttl 128, id 48897, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4741:4873(132) ack 4599 win 64007
>02:34:06.430910 IP (tos 0x0, ttl  64, id 59083, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4599:4707(108) ack 4873 win 5840
>02:34:06.431911 IP (tos 0x0, ttl 128, id 48898, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4873:4918(45) ack 4707 win 63899
>02:34:06.438670 IP (tos 0x0, ttl  64, id 59084, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4707:4746(39) ack 4918 win 5840
>02:34:06.456168 IP (tos 0x0, ttl 128, id 48899, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 4918:4918(0) ack 4746 win 63860
>02:34:06.538189 IP (tos 0x0, ttl 128, id 48900, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 4918:5166(248) ack 4746 win 63860
>02:34:06.544758 IP (tos 0x0, ttl  64, id 59085, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 4746:5042(296) ack 5166 win 5840
>02:34:06.549608 IP (tos 0x0, ttl 128, id 48901, offset 0, flags [DF], proto 6, length: 310) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 5166:5436(270) ack 5042 win 63564
>02:34:06.589622 IP (tos 0x0, ttl  64, id 59086, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 5042:5042(0) ack 5436 win 5840
>02:34:06.670783 IP (tos 0x0, ttl  64, id 59087, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5042:5168(126) ack 5436 win 5840
>02:34:06.676720 IP (tos 0x0, ttl 128, id 48902, offset 0, flags [DF], proto 6, length: 118) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 5436:5514(78) ack 5168 win 63438
>02:34:06.679774 IP (tos 0x0, ttl  64, id 59088, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 5168:5168(0) ack 5514 win 5840
>02:34:06.695561 IP (tos 0x0, ttl  64, id 59089, offset 0, flags [DF], proto 6, length: 92) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5168:5220(52) ack 5514 win 5840
>02:34:06.699556 IP (tos 0x0, ttl 128, id 48903, offset 0, flags [DF], proto 6, length: 190) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 5514:5664(150) ack 5220 win 63386
>02:34:06.739597 IP (tos 0x0, ttl  64, id 59090, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 5220:5220(0) ack 5664 win 5840
>02:34:06.819498 IP (tos 0x0, ttl  64, id 59091, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5220:5259(39) ack 5664 win 5840
>02:34:06.842113 IP (tos 0x0, ttl 128, id 48904, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 5664:5664(0) ack 5259 win 63347
>02:34:06.870103 IP (tos 0x0, ttl 128, id 48905, offset 0, flags [DF], proto 6, length: 48) 192.168.233.1.2153 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2057461851:2057461851(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:06.870526 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2153: S [tcp sum ok] 2785724549:2785724549(0) ack 2057461852 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:06.898137 IP (tos 0x0, ttl 128, id 48906, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2154 > 192.168.1.28.http: S [tcp sum ok] 2058298411:2058298411(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:06.898563 IP (tos 0x0, ttl  64, id 21, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.http > 192.168.1.20.2154: R [tcp sum ok] 0:0(0) ack 2058298412 win 0
>02:34:06.937089 IP (tos 0x0, ttl 128, id 48907, offset 0, flags [DF], proto 6, length: 48) 9.145.199.30.2143 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2055651905:2055651905(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:06.937510 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2143: S [tcp sum ok] 2780239381:2780239381(0) ack 2055651906 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:06.970092 IP (tos 0x0, ttl 128, id 48909, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2154 > 192.168.1.28.http: S [tcp sum ok] 2058298411:2058298411(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:06.970508 IP (tos 0x0, ttl  64, id 22, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.http > 192.168.1.20.2154: R [tcp sum ok] 0:0(0) ack 1 win 0
>02:34:07.035119 IP (tos 0x0, ttl 128, id 48910, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2154 > 192.168.1.28.http: S [tcp sum ok] 2058298411:2058298411(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:07.035537 IP (tos 0x0, ttl  64, id 23, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.http > 192.168.1.20.2154: R [tcp sum ok] 0:0(0) ack 1 win 0
>02:34:08.645647 IP (tos 0x0, ttl 128, id 48914, offset 0, flags [DF], proto 6, length: 146) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 5664:5770(106) ack 5259 win 63347
>02:34:08.646615 IP (tos 0x0, ttl  64, id 59092, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 5259:5259(0) ack 5770 win 5840
>02:34:08.652442 IP (tos 0x0, ttl  64, id 59093, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5259:5366(107) ack 5770 win 5840
>02:34:08.660423 IP (tos 0x0, ttl 128, id 48915, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 5770:5910(140) ack 5366 win 64512
>02:34:08.665510 IP (tos 0x0, ttl  64, id 59094, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5366:5417(51) ack 5910 win 5840
>02:34:08.672344 IP (tos 0x0, ttl 128, id 48916, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 5910:5973(63) ack 5417 win 64461
>02:34:08.676547 IP (tos 0x0, ttl  64, id 59095, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5417:5548(131) ack 5973 win 5840
>02:34:08.682600 IP (tos 0x0, ttl 128, id 48917, offset 0, flags [DF], proto 6, length: 304) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 5973:6237(264) ack 5548 win 64330
>02:34:08.689565 IP (tos 0x0, ttl  64, id 59096, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5548:5656(108) ack 6237 win 5840
>02:34:08.690800 IP (tos 0x0, ttl 128, id 48918, offset 0, flags [DF], proto 6, length: 216) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 6237:6413(176) ack 5656 win 64222
>02:34:08.698873 IP (tos 0x0, ttl  64, id 59097, offset 0, flags [DF], proto 6, length: 144) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5656:5760(104) ack 6413 win 5840
>02:34:08.704902 IP (tos 0x0, ttl 128, id 48919, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 6413:6545(132) ack 5760 win 64118
>02:34:08.713757 IP (tos 0x0, ttl  64, id 59098, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5760:5868(108) ack 6545 win 5840
>02:34:08.718914 IP (tos 0x0, ttl 128, id 48920, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 6545:6590(45) ack 5868 win 64010
>02:34:08.724558 IP (tos 0x0, ttl  64, id 59099, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5868:5907(39) ack 6590 win 5840
>02:34:08.738785 IP (tos 0x0, ttl 128, id 48922, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 6590:6590(0) ack 5907 win 63971
>02:34:08.745235 IP (tos 0x0, ttl 128, id 48923, offset 0, flags [DF], proto 6, length: 146) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 6590:6696(106) ack 5907 win 63971
>02:34:08.751292 IP (tos 0x0, ttl  64, id 59100, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 5907:6014(107) ack 6696 win 5840
>02:34:08.756865 IP (tos 0x0, ttl 128, id 48924, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 6696:6836(140) ack 6014 win 63864
>02:34:08.762354 IP (tos 0x0, ttl  64, id 59101, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 6014:6065(51) ack 6836 win 5840
>02:34:08.770234 IP (tos 0x0, ttl 128, id 48925, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 6836:6899(63) ack 6065 win 63813
>02:34:08.776284 IP (tos 0x0, ttl  64, id 59102, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 6065:6196(131) ack 6899 win 5840
>02:34:08.781404 IP (tos 0x0, ttl 128, id 48926, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 6899:7179(280) ack 6196 win 63682
>02:34:08.799471 IP (tos 0x0, ttl  64, id 59103, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 6196:6304(108) ack 7179 win 5840
>02:34:08.801089 IP (tos 0x0, ttl 128, id 48927, offset 0, flags [DF], proto 6, length: 184) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 7179:7323(144) ack 6304 win 63574
>02:34:08.840314 IP (tos 0x0, ttl  64, id 59104, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 6304:6304(0) ack 7323 win 5840
>02:34:08.864310 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.242.1.2152: S [tcp sum ok] 2786416580:2786416580(0) ack 2057386653 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:08.908284 IP (tos 0x0, ttl  64, id 59105, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 6304:6400(96) ack 7323 win 5840
>02:34:08.913612 IP (tos 0x0, ttl 128, id 48928, offset 0, flags [DF], proto 6, length: 644) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 7323:7927(604) ack 6400 win 63478
>02:34:08.925379 IP (tos 0x0, ttl  64, id 59106, offset 0, flags [DF], proto 6, length: 596) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 6400:6956(556) ack 7927 win 5840
>02:34:08.930259 IP (tos 0x0, ttl 128, id 48929, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 7927:8207(280) ack 6956 win 64512
>02:34:08.970236 IP (tos 0x0, ttl  64, id 59107, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 6956:6956(0) ack 8207 win 5840
>02:34:09.065231 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2153: S [tcp sum ok] 2785724549:2785724549(0) ack 2057461852 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:09.266276 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2143: S [tcp sum ok] 2780239381:2780239381(0) ack 2055651906 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:09.267177 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.ninstall: S [tcp sum ok] 2793311935:2793311935(0) ack 2057293355 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:10.053336 IP (tos 0x0, ttl  64, id 59108, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 6956:7064(108) ack 8207 win 5840
>02:34:10.060548 IP (tos 0x0, ttl 128, id 48930, offset 0, flags [DF], proto 6, length: 146) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 8207:8313(106) ack 7064 win 64404
>02:34:10.060646 IP (tos 0x0, ttl  64, id 59109, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 7064:7064(0) ack 8313 win 5840
>02:34:10.060552 IP (tos 0x0, ttl 128, id 48931, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 8313:9573(1260) ack 7064 win 64404
>02:34:10.060769 IP (tos 0x0, ttl  64, id 59110, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 7064:7064(0) ack 9573 win 7560
>02:34:10.060555 IP (tos 0x0, ttl 128, id 48932, offset 0, flags [DF], proto 6, length: 92) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 9573:9625(52) ack 7064 win 64404
>02:34:10.061584 IP (tos 0x0, ttl  64, id 59111, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 7064:7064(0) ack 9625 win 7560
>02:34:10.089173 IP (tos 0x0, ttl  64, id 59112, offset 0, flags [DF], proto 6, length: 147) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 7064:7171(107) ack 9625 win 7560
>02:34:10.104133 IP (tos 0x0, ttl  64, id 59113, offset 0, flags [DF], proto 6, length: 1124) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 7171:8255(1084) ack 9625 win 7560
>02:34:10.104342 IP (tos 0x0, ttl 128, id 48933, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 9625:9625(0) ack 8255 win 64512
>02:34:10.206164 IP (tos 0x0, ttl 128, id 48934, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 9625:9688(63) ack 8255 win 64512
>02:34:10.206168 IP (tos 0x0, ttl 128, id 48935, offset 0, flags [DF], proto 6, length: 180) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 9688:9828(140) ack 8255 win 64512
>02:34:10.214043 IP (tos 0x0, ttl  64, id 59114, offset 0, flags [DF], proto 6, length: 283) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 8255:8498(243) ack 9828 win 7560
>02:34:10.220195 IP (tos 0x0, ttl  64, id 59115, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 8498:8549(51) ack 9828 win 7560
>02:34:10.221105 IP (tos 0x0, ttl 128, id 48936, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 9828:9828(0) ack 8549 win 64218
>02:34:10.254679 IP (tos 0x0, ttl 128, id 48937, offset 0, flags [DF], proto 6, length: 184) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 9828:9972(144) ack 8549 win 64218
>02:34:10.254685 IP (tos 0x0, ttl 128, id 48938, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 9972:10035(63) ack 8549 win 64218
>02:34:10.268316 IP (tos 0x0, ttl  64, id 59116, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 8549:8645(96) ack 10035 win 7560
>02:34:10.275017 IP (tos 0x0, ttl  64, id 59117, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 8645:8776(131) ack 10035 win 7560
>02:34:10.275210 IP (tos 0x0, ttl 128, id 48939, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 10035:10035(0) ack 8776 win 63991
>02:34:10.310724 IP (tos 0x0, ttl 128, id 48940, offset 0, flags [DF], proto 6, length: 644) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 10035:10639(604) ack 8776 win 63991
>02:34:10.310728 IP (tos 0x0, ttl 128, id 48941, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 10639:10919(280) ack 8776 win 63991
>02:34:10.322162 IP (tos 0x0, ttl  64, id 59118, offset 0, flags [DF], proto 6, length: 596) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 8776:9332(556) ack 10919 win 7560
>02:34:10.335118 IP (tos 0x0, ttl  64, id 59119, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 9332:9440(108) ack 10919 win 7560
>02:34:10.335342 IP (tos 0x0, ttl 128, id 48942, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 10919:10919(0) ack 9440 win 63327
>02:34:10.360695 IP (tos 0x0, ttl 128, id 48943, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 10919:12179(1260) ack 9440 win 63327
>02:34:10.360698 IP (tos 0x0, ttl 128, id 48944, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 12179:13439(1260) ack 9440 win 63327
>02:34:10.360790 IP (tos 0x0, ttl  64, id 59120, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 9440:9440(0) ack 13439 win 7560
>02:34:10.360701 IP (tos 0x0, ttl 128, id 48945, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 13439:14699(1260) ack 9440 win 63327
>02:34:10.360703 IP (tos 0x0, ttl 128, id 48946, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 14699:15267(568) ack 9440 win 63327
>02:34:10.360705 IP (tos 0x0, ttl 128, id 48947, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 15267:16527(1260) ack 9440 win 63327
>02:34:10.360706 IP (tos 0x0, ttl 128, id 48948, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 16527:17787(1260) ack 9440 win 63327
>02:34:10.360880 IP (tos 0x0, ttl 128, id 48949, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 17787:19047(1260) ack 9440 win 63327
>02:34:10.360882 IP (tos 0x0, ttl 128, id 48950, offset 0, flags [DF], proto 6, length: 504) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 19047:19511(464) ack 9440 win 63327
>02:34:10.369270 IP (tos 0x0, ttl  64, id 59121, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 9440:9440(0) ack 19511 win 1488
>02:34:10.371006 IP (tos 0x0, ttl  64, id 59122, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 9440:9440(0) ack 19511 win 6300
>02:34:10.374238 IP (tos 0x0, ttl  64, id 59123, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 9440:9491(51) ack 19511 win 6300
>02:34:10.394105 IP (tos 0x0, ttl  64, id 59124, offset 0, flags [DF], proto 6, length: 1124) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 9491:10575(1084) ack 19511 win 7560
>02:34:10.395112 IP (tos 0x0, ttl 128, id 48951, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 19511:19511(0) ack 10575 win 64512
>02:34:10.410661 IP (tos 0x0, ttl 128, id 48952, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 19511:20771(1260) ack 10575 win 64512
>02:34:10.410665 IP (tos 0x0, ttl 128, id 48953, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 20771:22031(1260) ack 10575 win 64512
>02:34:10.410754 IP (tos 0x0, ttl  64, id 59125, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 10575:10575(0) ack 22031 win 7560
>02:34:10.410667 IP (tos 0x0, ttl 128, id 48954, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 22031:23291(1260) ack 10575 win 64512
>02:34:10.410669 IP (tos 0x0, ttl 128, id 48955, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 23291:23859(568) ack 10575 win 64512
>02:34:10.410672 IP (tos 0x0, ttl 128, id 48956, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 23859:23922(63) ack 10575 win 64512
>02:34:10.416126 IP (tos 0x0, ttl  64, id 59126, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 10575:10575(0) ack 23922 win 6300
>02:34:10.421193 IP (tos 0x0, ttl  64, id 59127, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 10575:10626(51) ack 23922 win 7560
>02:34:10.427277 IP (tos 0x0, ttl  64, id 59128, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 10626:11886(1260) ack 23922 win 7560
>02:34:10.428179 IP (tos 0x0, ttl 128, id 48957, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 23922:23922(0) ack 11886 win 64512
>02:34:10.428231 IP (tos 0x0, ttl  64, id 59129, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 11886:13146(1260) ack 23922 win 7560
>02:34:10.429157 IP (tos 0x0, ttl  64, id 59130, offset 0, flags [DF], proto 6, length: 695) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 13146:13801(655) ack 23922 win 7560
>02:34:10.429273 IP (tos 0x0, ttl 128, id 48958, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 23922:23922(0) ack 13801 win 64512
>02:34:10.463749 IP (tos 0x0, ttl 128, id 48959, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 23922:25182(1260) ack 13801 win 64512
>02:34:10.463753 IP (tos 0x0, ttl 128, id 48960, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 25182:26442(1260) ack 13801 win 64512
>02:34:10.463839 IP (tos 0x0, ttl  64, id 59131, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 13801:13801(0) ack 26442 win 7560
>02:34:10.463756 IP (tos 0x0, ttl 128, id 48961, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 26442:27702(1260) ack 13801 win 64512
>02:34:10.463758 IP (tos 0x0, ttl 128, id 48962, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 27702:28270(568) ack 13801 win 64512
>02:34:10.463759 IP (tos 0x0, ttl 128, id 48963, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 28270:28550(280) ack 13801 win 64512
>02:34:10.468197 IP (tos 0x0, ttl  64, id 59132, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 13801:13801(0) ack 28550 win 5452
>02:34:10.472192 IP (tos 0x0, ttl  64, id 59133, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 13801:13852(51) ack 28550 win 7560
>02:34:10.484086 IP (tos 0x0, ttl  64, id 59134, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 13852:13960(108) ack 28550 win 7560
>02:34:10.484306 IP (tos 0x0, ttl 128, id 48964, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 28550:28550(0) ack 13960 win 64353
>02:34:10.515458 IP (tos 0x0, ttl 128, id 48965, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 28550:29810(1260) ack 13960 win 64353
>02:34:10.515462 IP (tos 0x0, ttl 128, id 48966, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 29810:31070(1260) ack 13960 win 64353
>02:34:10.515554 IP (tos 0x0, ttl  64, id 59135, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 13960:13960(0) ack 31070 win 7560
>02:34:10.515464 IP (tos 0x0, ttl 128, id 48967, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 31070:32330(1260) ack 13960 win 64353
>02:34:10.515466 IP (tos 0x0, ttl 128, id 48968, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 32330:32898(568) ack 13960 win 64353
>02:34:10.515470 IP (tos 0x0, ttl 128, id 48969, offset 0, flags [DF], proto 6, length: 184) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 32898:33042(144) ack 13960 win 64353
>02:34:10.517276 IP (tos 0x0, ttl  64, id 59136, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 13960:13960(0) ack 33042 win 6300
>02:34:10.521221 IP (tos 0x0, ttl  64, id 59137, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 13960:14011(51) ack 33042 win 7560
>02:34:10.539278 IP (tos 0x0, ttl  64, id 59138, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14011:14107(96) ack 33042 win 7560
>02:34:10.540557 IP (tos 0x0, ttl 128, id 48970, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 33042:33042(0) ack 14107 win 64206
>02:34:10.566911 IP (tos 0x0, ttl 128, id 48971, offset 0, flags [DF], proto 6, length: 644) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 33042:33646(604) ack 14107 win 64206
>02:34:10.566915 IP (tos 0x0, ttl 128, id 48972, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 33646:34906(1260) ack 14107 win 64206
>02:34:10.566936 IP (tos 0x0, ttl  64, id 59139, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14107:14107(0) ack 34906 win 7560
>02:34:10.566917 IP (tos 0x0, ttl 128, id 48973, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 34906:36166(1260) ack 14107 win 64206
>02:34:10.566920 IP (tos 0x0, ttl 128, id 48974, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 36166:37426(1260) ack 14107 win 64206
>02:34:10.566921 IP (tos 0x0, ttl 128, id 48975, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 37426:37994(568) ack 14107 win 64206
>02:34:10.569157 IP (tos 0x0, ttl  64, id 59140, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14107:14107(0) ack 37994 win 5040
>02:34:10.578250 IP (tos 0x0, ttl  64, id 59141, offset 0, flags [DF], proto 6, length: 596) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14107:14663(556) ack 37994 win 6300
>02:34:10.588055 IP (tos 0x0, ttl  64, id 59142, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14663:14714(51) ack 37994 win 7560
>02:34:10.588255 IP (tos 0x0, ttl 128, id 48976, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 37994:37994(0) ack 14714 win 63599
>02:34:10.619447 IP (tos 0x0, ttl 128, id 48977, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 37994:38126(132) ack 14714 win 63599
>02:34:10.619452 IP (tos 0x0, ttl 128, id 48978, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 38126:39386(1260) ack 14714 win 63599
>02:34:10.620478 IP (tos 0x0, ttl  64, id 59143, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14714:14714(0) ack 39386 win 7560
>02:34:10.619454 IP (tos 0x0, ttl 128, id 48979, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 39386:40646(1260) ack 14714 win 63599
>02:34:10.619456 IP (tos 0x0, ttl 128, id 48980, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 40646:41906(1260) ack 14714 win 63599
>02:34:10.620984 IP (tos 0x0, ttl  64, id 59144, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14714:14714(0) ack 41906 win 7560
>02:34:10.619458 IP (tos 0x0, ttl 128, id 48981, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 41906:42474(568) ack 14714 win 63599
>02:34:10.631191 IP (tos 0x0, ttl  64, id 59145, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14714:14822(108) ack 42474 win 6992
>02:34:10.636103 IP (tos 0x0, ttl  64, id 59146, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14822:14873(51) ack 42474 win 7560
>02:34:10.636960 IP (tos 0x0, ttl 128, id 48982, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 42474:42474(0) ack 14873 win 63440
>02:34:10.671453 IP (tos 0x0, ttl 128, id 48983, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 42474:43734(1260) ack 14873 win 63440
>02:34:10.671458 IP (tos 0x0, ttl 128, id 48984, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 43734:44994(1260) ack 14873 win 63440
>02:34:10.671548 IP (tos 0x0, ttl  64, id 59147, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14873:14873(0) ack 44994 win 7560
>02:34:10.671460 IP (tos 0x0, ttl 128, id 48985, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 44994:46254(1260) ack 14873 win 63440
>02:34:10.671462 IP (tos 0x0, ttl 128, id 48986, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 46254:46822(568) ack 14873 win 63440
>02:34:10.677185 IP (tos 0x0, ttl  64, id 59148, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14873:14873(0) ack 46822 win 6300
>02:34:10.681145 IP (tos 0x0, ttl  64, id 59149, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14873:14924(51) ack 46822 win 7560
>02:34:10.723483 IP (tos 0x0, ttl 128, id 48987, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 46822:48082(1260) ack 14924 win 63389
>02:34:10.723488 IP (tos 0x0, ttl 128, id 48988, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 48082:49342(1260) ack 14924 win 63389
>02:34:10.723579 IP (tos 0x0, ttl  64, id 59150, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14924:14924(0) ack 49342 win 7560
>02:34:10.723489 IP (tos 0x0, ttl 128, id 48989, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 49342:50602(1260) ack 14924 win 63389
>02:34:10.723492 IP (tos 0x0, ttl 128, id 48990, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 50602:51170(568) ack 14924 win 63389
>02:34:10.724986 IP (tos 0x0, ttl  64, id 59151, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14924:14924(0) ack 51170 win 6300
>02:34:10.728235 IP (tos 0x0, ttl  64, id 59152, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14924:14975(51) ack 51170 win 7560
>02:34:10.776435 IP (tos 0x0, ttl 128, id 48991, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 51170:52430(1260) ack 14975 win 63338
>02:34:10.776439 IP (tos 0x0, ttl 128, id 48992, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 52430:53690(1260) ack 14975 win 63338
>02:34:10.776532 IP (tos 0x0, ttl  64, id 59153, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14975:14975(0) ack 53690 win 7560
>02:34:10.776442 IP (tos 0x0, ttl 128, id 48993, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 53690:54950(1260) ack 14975 win 63338
>02:34:10.776443 IP (tos 0x0, ttl 128, id 48994, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 54950:55518(568) ack 14975 win 63338
>02:34:10.782042 IP (tos 0x0, ttl  64, id 59154, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 14975:14975(0) ack 55518 win 6300
>02:34:10.789206 IP (tos 0x0, ttl  64, id 59155, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 14975:15026(51) ack 55518 win 7560
>02:34:10.820429 IP (tos 0x0, ttl 128, id 48995, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 55518:56778(1260) ack 15026 win 63287
>02:34:10.820434 IP (tos 0x0, ttl 128, id 48996, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 56778:58038(1260) ack 15026 win 63287
>02:34:10.820521 IP (tos 0x0, ttl  64, id 59156, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15026:15026(0) ack 58038 win 7560
>02:34:10.820436 IP (tos 0x0, ttl 128, id 48997, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 58038:59298(1260) ack 15026 win 63287
>02:34:10.820438 IP (tos 0x0, ttl 128, id 48998, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 59298:59866(568) ack 15026 win 63287
>02:34:10.825995 IP (tos 0x0, ttl  64, id 59157, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15026:15026(0) ack 59866 win 6300
>02:34:10.830008 IP (tos 0x0, ttl  64, id 59158, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15026:15077(51) ack 59866 win 7560
>02:34:10.876440 IP (tos 0x0, ttl 128, id 48999, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 59866:61126(1260) ack 15077 win 64512
>02:34:10.876444 IP (tos 0x0, ttl 128, id 49000, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 61126:62386(1260) ack 15077 win 64512
>02:34:10.876922 IP (tos 0x0, ttl  64, id 59159, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15077:15077(0) ack 62386 win 7560
>02:34:10.876447 IP (tos 0x0, ttl 128, id 49001, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 62386:63646(1260) ack 15077 win 64512
>02:34:10.876449 IP (tos 0x0, ttl 128, id 49002, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 63646:64214(568) ack 15077 win 64512
>02:34:10.878933 IP (tos 0x0, ttl  64, id 59160, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15077:15077(0) ack 64214 win 6300
>02:34:10.887036 IP (tos 0x0, ttl  64, id 59161, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15077:15128(51) ack 64214 win 7560
>02:34:10.931549 IP (tos 0x0, ttl 128, id 49003, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 64214:65474(1260) ack 15128 win 64461
>02:34:10.931889 IP (tos 0x0, ttl 128, id 49004, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 65474:66734(1260) ack 15128 win 64461
>02:34:10.932024 IP (tos 0x0, ttl  64, id 59162, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15128:15128(0) ack 66734 win 7560
>02:34:10.931891 IP (tos 0x0, ttl 128, id 49005, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 66734:67994(1260) ack 15128 win 64461
>02:34:10.931893 IP (tos 0x0, ttl 128, id 49006, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 67994:68562(568) ack 15128 win 64461
>02:34:10.947071 IP (tos 0x0, ttl  64, id 59163, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15128:15128(0) ack 68562 win 6300
>02:34:10.952055 IP (tos 0x0, ttl  64, id 59164, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15128:15179(51) ack 68562 win 7560
>02:34:11.002599 IP (tos 0x0, ttl 128, id 49007, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 68562:69822(1260) ack 15179 win 64410
>02:34:11.002603 IP (tos 0x0, ttl 128, id 49008, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 69822:71082(1260) ack 15179 win 64410
>02:34:11.002843 IP (tos 0x0, ttl  64, id 59165, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15179:15179(0) ack 71082 win 7560
>02:34:11.002605 IP (tos 0x0, ttl 128, id 49009, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 71082:72342(1260) ack 15179 win 64410
>02:34:11.002606 IP (tos 0x0, ttl 128, id 49010, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 72342:72910(568) ack 15179 win 64410
>02:34:11.002610 IP (tos 0x0, ttl 128, id 49011, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2155 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2059424188:2059424188(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:11.002868 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2155: S [tcp sum ok] 2787260846:2787260846(0) ack 2059424189 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:11.002612 IP (tos 0x0, ttl 128, id 49012, offset 0, flags [DF], proto 6, length: 48) 9.145.199.30.2156 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2059479283:2059479283(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:11.003731 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2156: S [tcp sum ok] 2793801498:2793801498(0) ack 2059479284 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:11.002614 IP (tos 0x0, ttl 128, id 49013, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2157 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2059514366:2059514366(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:11.004082 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.1.20.2157: S [tcp sum ok] 2784051124:2784051124(0) ack 2059514367 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:11.002616 IP (tos 0x0, ttl 128, id 49014, offset 0, flags [DF], proto 6, length: 48) 192.168.242.1.2158 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2059548574:2059548574(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:11.004188 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.242.1.2158: S [tcp sum ok] 2797719035:2797719035(0) ack 2059548575 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:11.003683 IP (tos 0x0, ttl 128, id 49015, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2155 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:11.004171 IP (tos 0x0, ttl 128, id 49016, offset 0, flags [none], proto 6, length: 40) 192.168.1.20.2157 > 192.168.1.28.netbios-ssn: R [tcp sum ok] 2059514367:2059514367(0) win 0
>02:34:11.012105 IP (tos 0x0, ttl  64, id 59166, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15179:15179(0) ack 72910 win 6300
>02:34:11.016150 IP (tos 0x0, ttl  64, id 59167, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15179:15230(51) ack 72910 win 7560
>02:34:11.051566 IP (tos 0x0, ttl 128, id 49017, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 72910:74170(1260) ack 15230 win 64359
>02:34:11.051571 IP (tos 0x0, ttl 128, id 49018, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 74170:75430(1260) ack 15230 win 64359
>02:34:11.051663 IP (tos 0x0, ttl  64, id 59168, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15230:15230(0) ack 75430 win 7560
>02:34:11.051573 IP (tos 0x0, ttl 128, id 49019, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 75430:76690(1260) ack 15230 win 64359
>02:34:11.051575 IP (tos 0x0, ttl 128, id 49020, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 76690:77258(568) ack 15230 win 64359
>02:34:11.051578 IP (tos 0x0, ttl 128, id 49021, offset 0, flags [DF], proto 6, length: 48) 192.168.233.1.2159 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2059633775:2059633775(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:11.052154 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2159: S [tcp sum ok] 2794438556:2794438556(0) ack 2059633776 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:11.051581 IP (tos 0x0, ttl 128, id 49022, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2155 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:11.052850 IP (tos 0x0, ttl  64, id 304, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2155: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:11.058119 IP (tos 0x0, ttl  64, id 59169, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15230:15230(0) ack 77258 win 6300
>02:34:11.062084 IP (tos 0x0, ttl  64, id 59170, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15230:15281(51) ack 77258 win 7560
>02:34:11.103753 IP (tos 0x0, ttl 128, id 49023, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 77258:78518(1260) ack 15281 win 64308
>02:34:11.103757 IP (tos 0x0, ttl 128, id 49024, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 78518:79778(1260) ack 15281 win 64308
>02:34:11.103847 IP (tos 0x0, ttl  64, id 59171, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15281:15281(0) ack 79778 win 7560
>02:34:11.103759 IP (tos 0x0, ttl 128, id 49025, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 79778:81038(1260) ack 15281 win 64308
>02:34:11.103761 IP (tos 0x0, ttl 128, id 49026, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 81038:81606(568) ack 15281 win 64308
>02:34:11.106909 IP (tos 0x0, ttl  64, id 59172, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15281:15281(0) ack 81606 win 6300
>02:34:11.111133 IP (tos 0x0, ttl  64, id 59173, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15281:15332(51) ack 81606 win 7560
>02:34:11.157376 IP (tos 0x0, ttl 128, id 49027, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 81606:82866(1260) ack 15332 win 64257
>02:34:11.157381 IP (tos 0x0, ttl 128, id 49028, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 82866:84126(1260) ack 15332 win 64257
>02:34:11.158432 IP (tos 0x0, ttl  64, id 59174, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15332:15332(0) ack 84126 win 7560
>02:34:11.157383 IP (tos 0x0, ttl 128, id 49029, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 84126:85386(1260) ack 15332 win 64257
>02:34:11.157386 IP (tos 0x0, ttl 128, id 49030, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 85386:85954(568) ack 15332 win 64257
>02:34:11.161010 IP (tos 0x0, ttl  64, id 59175, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15332:15332(0) ack 85954 win 6300
>02:34:11.168892 IP (tos 0x0, ttl  64, id 59176, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15332:15383(51) ack 85954 win 7560
>02:34:11.207447 IP (tos 0x0, ttl 128, id 49031, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 85954:87214(1260) ack 15383 win 64206
>02:34:11.207451 IP (tos 0x0, ttl 128, id 49032, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 87214:88474(1260) ack 15383 win 64206
>02:34:11.207541 IP (tos 0x0, ttl  64, id 59177, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15383:15383(0) ack 88474 win 7560
>02:34:11.207453 IP (tos 0x0, ttl 128, id 49033, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 88474:89734(1260) ack 15383 win 64206
>02:34:11.207455 IP (tos 0x0, ttl 128, id 49034, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 89734:90302(568) ack 15383 win 64206
>02:34:11.212925 IP (tos 0x0, ttl  64, id 59178, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15383:15383(0) ack 90302 win 6300
>02:34:11.232012 IP (tos 0x0, ttl  64, id 59179, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15383:15434(51) ack 90302 win 7560
>02:34:11.256350 IP (tos 0x0, ttl 128, id 49035, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 90302:91562(1260) ack 15434 win 64155
>02:34:11.256354 IP (tos 0x0, ttl 128, id 49036, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 91562:92822(1260) ack 15434 win 64155
>02:34:11.256448 IP (tos 0x0, ttl  64, id 59180, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15434:15434(0) ack 92822 win 7560
>02:34:11.256357 IP (tos 0x0, ttl 128, id 49037, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 92822:94082(1260) ack 15434 win 64155
>02:34:11.256359 IP (tos 0x0, ttl 128, id 49038, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 94082:94650(568) ack 15434 win 64155
>02:34:11.261004 IP (tos 0x0, ttl  64, id 59181, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15434:15434(0) ack 94650 win 6300
>02:34:11.266131 IP (tos 0x0, ttl  64, id 59182, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15434:15485(51) ack 94650 win 7560
>02:34:11.267153 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2146: S [tcp sum ok] 2786981487:2786981487(0) ack 2056388710 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:11.308585 IP (tos 0x0, ttl 128, id 49039, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 94650:95910(1260) ack 15485 win 64104
>02:34:11.308589 IP (tos 0x0, ttl 128, id 49040, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 95910:97170(1260) ack 15485 win 64104
>02:34:11.308677 IP (tos 0x0, ttl  64, id 59183, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15485:15485(0) ack 97170 win 7560
>02:34:11.308592 IP (tos 0x0, ttl 128, id 49041, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 97170:98430(1260) ack 15485 win 64104
>02:34:11.308594 IP (tos 0x0, ttl 128, id 49042, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 98430:98998(568) ack 15485 win 64104
>02:34:11.312011 IP (tos 0x0, ttl  64, id 59184, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15485:15485(0) ack 98998 win 6300
>02:34:11.315988 IP (tos 0x0, ttl  64, id 59185, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15485:15536(51) ack 98998 win 7560
>02:34:11.361345 IP (tos 0x0, ttl 128, id 49043, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 98998:100258(1260) ack 15536 win 64053
>02:34:11.361350 IP (tos 0x0, ttl 128, id 49044, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 100258:101518(1260) ack 15536 win 64053
>02:34:11.361437 IP (tos 0x0, ttl  64, id 59186, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15536:15536(0) ack 101518 win 7560
>02:34:11.361352 IP (tos 0x0, ttl 128, id 49045, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 101518:102778(1260) ack 15536 win 64053
>02:34:11.361354 IP (tos 0x0, ttl 128, id 49046, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 102778:103346(568) ack 15536 win 64053
>02:34:11.367088 IP (tos 0x0, ttl  64, id 59187, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15536:15536(0) ack 103346 win 6300
>02:34:11.371088 IP (tos 0x0, ttl  64, id 59188, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 15536:15587(51) ack 103346 win 7560
>02:34:11.414338 IP (tos 0x0, ttl 128, id 49047, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 103346:104606(1260) ack 15587 win 64002
>02:34:11.414343 IP (tos 0x0, ttl 128, id 49048, offset 0, flags [DF], proto 6, length: 1288) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 104606:105854(1248) ack 15587 win 64002
>02:34:11.414430 IP (tos 0x0, ttl  64, id 59189, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15587:15587(0) ack 105854 win 7560
>02:34:11.443843 IP (tos 0x0, ttl  64, id 59190, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 15587:16847(1260) ack 105854 win 7560
>02:34:11.444903 IP (tos 0x0, ttl  64, id 59191, offset 0, flags [DF], proto 6, length: 44) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 16847:16851(4) ack 105854 win 7560
>02:34:11.445056 IP (tos 0x0, ttl 128, id 49049, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 105854:105854(0) ack 16851 win 64512
>02:34:11.469632 IP (tos 0x0, ttl 128, id 49050, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 105854:105917(63) ack 16851 win 64512
>02:34:11.476082 IP (tos 0x0, ttl  64, id 59192, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 16851:18111(1260) ack 105917 win 7560
>02:34:11.476998 IP (tos 0x0, ttl  64, id 59193, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 18111:19371(1260) ack 105917 win 7560
>02:34:11.477093 IP (tos 0x0, ttl 128, id 49051, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 105917:105917(0) ack 19371 win 64512
>02:34:11.477128 IP (tos 0x0, ttl  64, id 59194, offset 0, flags [DF], proto 6, length: 659) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 19371:19990(619) ack 105917 win 7560
>02:34:11.524778 IP (tos 0x0, ttl 128, id 49052, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 105917:105980(63) ack 19990 win 63893
>02:34:11.526785 IP (tos 0x0, ttl  64, id 59195, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 19990:21250(1260) ack 105980 win 7560
>02:34:11.527791 IP (tos 0x0, ttl  64, id 59196, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 21250:22510(1260) ack 105980 win 7560
>02:34:11.527792 IP (tos 0x0, ttl 128, id 49053, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 105980:105980(0) ack 22510 win 64512
>02:34:11.527792 IP (tos 0x0, ttl  64, id 59197, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 22510:23770(1260) ack 105980 win 7560
>02:34:11.527792 IP (tos 0x0, ttl  64, id 59198, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 23770:24333(563) ack 105980 win 7560
>02:34:11.527793 IP (tos 0x0, ttl 128, id 49054, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 105980:105980(0) ack 24333 win 64512
>02:34:11.576308 IP (tos 0x0, ttl 128, id 49055, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 105980:106043(63) ack 24333 win 64512
>02:34:11.582827 IP (tos 0x0, ttl  64, id 59199, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 24333:25593(1260) ack 106043 win 7560
>02:34:11.583046 IP (tos 0x0, ttl  64, id 59200, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 25593:26853(1260) ack 106043 win 7560
>02:34:11.583923 IP (tos 0x0, ttl 128, id 49056, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106043:106043(0) ack 26853 win 64512
>02:34:11.584021 IP (tos 0x0, ttl  64, id 59201, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 26853:28113(1260) ack 106043 win 7560
>02:34:11.584114 IP (tos 0x0, ttl  64, id 59202, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 28113:28676(563) ack 106043 win 7560
>02:34:11.584890 IP (tos 0x0, ttl 128, id 49057, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106043:106043(0) ack 28676 win 64512
>02:34:11.592190 IP (tos 0x0, ttl  64, id 305, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2155: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:11.628501 IP (tos 0x0, ttl 128, id 49058, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106043:106106(63) ack 28676 win 64512
>02:34:11.628506 IP (tos 0x0, ttl 128, id 49059, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2155 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:11.628595 IP (tos 0x0, ttl  64, id 306, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2155: . [tcp sum ok] 132:132(0) ack 386 win 5840
>02:34:11.635816 IP (tos 0x0, ttl  64, id 59203, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 28676:29936(1260) ack 106106 win 7560
>02:34:11.636026 IP (tos 0x0, ttl  64, id 59204, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 29936:31196(1260) ack 106106 win 7560
>02:34:11.636789 IP (tos 0x0, ttl 128, id 49060, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106106:106106(0) ack 31196 win 64512
>02:34:11.636876 IP (tos 0x0, ttl  64, id 59205, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 31196:32456(1260) ack 106106 win 7560
>02:34:11.636947 IP (tos 0x0, ttl  64, id 59206, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 32456:33019(563) ack 106106 win 7560
>02:34:11.637828 IP (tos 0x0, ttl 128, id 49061, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106106:106106(0) ack 33019 win 64512
>02:34:11.660120 IP (tos 0x0, ttl  64, id 307, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2155: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:11.680646 IP (tos 0x0, ttl 128, id 49062, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106106:106169(63) ack 33019 win 64512
>02:34:11.685988 IP (tos 0x0, ttl  64, id 59207, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 33019:34279(1260) ack 106169 win 7560
>02:34:11.686946 IP (tos 0x0, ttl  64, id 59208, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 34279:35539(1260) ack 106169 win 7560
>02:34:11.687044 IP (tos 0x0, ttl 128, id 49063, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106169:106169(0) ack 35539 win 64512
>02:34:11.687086 IP (tos 0x0, ttl  64, id 59209, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 35539:36799(1260) ack 106169 win 7560
>02:34:11.687833 IP (tos 0x0, ttl  64, id 59210, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 36799:37362(563) ack 106169 win 7560
>02:34:11.687916 IP (tos 0x0, ttl 128, id 49064, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106169:106169(0) ack 37362 win 64512
>02:34:11.736288 IP (tos 0x0, ttl 128, id 49065, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2155 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:11.736295 IP (tos 0x0, ttl 128, id 49066, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106169:106232(63) ack 37362 win 64512
>02:34:11.743049 IP (tos 0x0, ttl  64, id 59211, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 37362:38622(1260) ack 106232 win 7560
>02:34:11.743962 IP (tos 0x0, ttl  64, id 59212, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 38622:39882(1260) ack 106232 win 7560
>02:34:11.744061 IP (tos 0x0, ttl 128, id 49067, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106232:106232(0) ack 39882 win 64512
>02:34:11.744091 IP (tos 0x0, ttl  64, id 59213, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 39882:41142(1260) ack 106232 win 7560
>02:34:11.744954 IP (tos 0x0, ttl  64, id 59214, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 41142:41705(563) ack 106232 win 7560
>02:34:11.745069 IP (tos 0x0, ttl 128, id 49068, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106232:106232(0) ack 41705 win 64512
>02:34:11.774794 IP (tos 0x0, ttl  64, id 308, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2155: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:11.788632 IP (tos 0x0, ttl 128, id 49069, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106232:106295(63) ack 41705 win 64512
>02:34:11.792914 IP (tos 0x0, ttl  64, id 59215, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 41705:42965(1260) ack 106295 win 7560
>02:34:11.793947 IP (tos 0x0, ttl  64, id 59216, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 42965:44225(1260) ack 106295 win 7560
>02:34:11.794060 IP (tos 0x0, ttl 128, id 49070, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106295:106295(0) ack 44225 win 64512
>02:34:11.794092 IP (tos 0x0, ttl  64, id 59217, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 44225:45485(1260) ack 106295 win 7560
>02:34:11.794813 IP (tos 0x0, ttl  64, id 59218, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 45485:46048(563) ack 106295 win 7560
>02:34:11.794901 IP (tos 0x0, ttl 128, id 49071, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106295:106295(0) ack 46048 win 64512
>02:34:11.873269 IP (tos 0x0, ttl 128, id 49072, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106295:106358(63) ack 46048 win 64512
>02:34:11.880390 IP (tos 0x0, ttl  64, id 59219, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 46048:47308(1260) ack 106358 win 7560
>02:34:11.881409 IP (tos 0x0, ttl  64, id 59220, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 47308:48568(1260) ack 106358 win 7560
>02:34:11.881960 IP (tos 0x0, ttl 128, id 49073, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106358:106358(0) ack 48568 win 64512
>02:34:11.882959 IP (tos 0x0, ttl  64, id 59221, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 48568:49828(1260) ack 106358 win 7560
>02:34:11.883068 IP (tos 0x0, ttl  64, id 59222, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 49828:50391(563) ack 106358 win 7560
>02:34:11.883863 IP (tos 0x0, ttl 128, id 49074, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106358:106358(0) ack 50391 win 64512
>02:34:11.985604 IP (tos 0x0, ttl 128, id 49075, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106358:106421(63) ack 50391 win 64512
>02:34:11.990947 IP (tos 0x0, ttl  64, id 59223, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 50391:51651(1260) ack 106421 win 7560
>02:34:11.991869 IP (tos 0x0, ttl  64, id 59224, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 51651:52911(1260) ack 106421 win 7560
>02:34:11.991967 IP (tos 0x0, ttl 128, id 49076, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106421:106421(0) ack 52911 win 64512
>02:34:11.991998 IP (tos 0x0, ttl  64, id 59225, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 52911:54171(1260) ack 106421 win 7560
>02:34:11.992750 IP (tos 0x0, ttl  64, id 59226, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 54171:54734(563) ack 106421 win 7560
>02:34:11.992841 IP (tos 0x0, ttl 128, id 49077, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106421:106421(0) ack 54734 win 64512
>02:34:12.015797 IP (tos 0x0, ttl  64, id 309, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2155: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:12.016745 IP (tos 0x0, ttl 128, id 49078, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2155 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:12.026366 IP (tos 0x0, ttl 128, id 49079, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106421:106484(63) ack 54734 win 64512
>02:34:12.031950 IP (tos 0x0, ttl  64, id 59227, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 54734:55994(1260) ack 106484 win 7560
>02:34:12.032876 IP (tos 0x0, ttl  64, id 59228, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 55994:57254(1260) ack 106484 win 7560
>02:34:12.032976 IP (tos 0x0, ttl 128, id 49080, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106484:106484(0) ack 57254 win 64512
>02:34:12.033007 IP (tos 0x0, ttl  64, id 59229, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 57254:58514(1260) ack 106484 win 7560
>02:34:12.033881 IP (tos 0x0, ttl  64, id 59230, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 58514:59077(563) ack 106484 win 7560
>02:34:12.033990 IP (tos 0x0, ttl 128, id 49081, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106484:106484(0) ack 59077 win 64512
>02:34:12.081225 IP (tos 0x0, ttl 128, id 49082, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106484:106547(63) ack 59077 win 64512
>02:34:12.083702 IP (tos 0x0, ttl  64, id 59231, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 59077:60337(1260) ack 106547 win 7560
>02:34:12.085883 IP (tos 0x0, ttl  64, id 59232, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 60337:61597(1260) ack 106547 win 7560
>02:34:12.086027 IP (tos 0x0, ttl 128, id 49083, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106547:106547(0) ack 61597 win 64512
>02:34:12.086064 IP (tos 0x0, ttl  64, id 59233, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 61597:62857(1260) ack 106547 win 7560
>02:34:12.086737 IP (tos 0x0, ttl  64, id 59234, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 62857:63420(563) ack 106547 win 7560
>02:34:12.086830 IP (tos 0x0, ttl 128, id 49084, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106547:106547(0) ack 63420 win 64512
>02:34:12.132218 IP (tos 0x0, ttl 128, id 49085, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106547:106610(63) ack 63420 win 64512
>02:34:12.138021 IP (tos 0x0, ttl  64, id 59235, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 63420:64680(1260) ack 106610 win 7560
>02:34:12.138929 IP (tos 0x0, ttl  64, id 59236, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 64680:65940(1260) ack 106610 win 7560
>02:34:12.139025 IP (tos 0x0, ttl 128, id 49086, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106610:106610(0) ack 65940 win 64512
>02:34:12.139796 IP (tos 0x0, ttl  64, id 59237, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 65940:67200(1260) ack 106610 win 7560
>02:34:12.139868 IP (tos 0x0, ttl  64, id 59238, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 67200:67763(563) ack 106610 win 7560
>02:34:12.139962 IP (tos 0x0, ttl 128, id 49087, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106610:106610(0) ack 67763 win 64512
>02:34:12.190662 IP (tos 0x0, ttl 128, id 49088, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106610:106673(63) ack 67763 win 64512
>02:34:12.195795 IP (tos 0x0, ttl  64, id 59239, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 67763:69023(1260) ack 106673 win 7560
>02:34:12.196723 IP (tos 0x0, ttl  64, id 59240, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 69023:70283(1260) ack 106673 win 7560
>02:34:12.196822 IP (tos 0x0, ttl 128, id 49089, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106673:106673(0) ack 70283 win 64512
>02:34:12.196854 IP (tos 0x0, ttl  64, id 59241, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 70283:71543(1260) ack 106673 win 7560
>02:34:12.196966 IP (tos 0x0, ttl  64, id 59242, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 71543:72106(563) ack 106673 win 7560
>02:34:12.197740 IP (tos 0x0, ttl 128, id 49090, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106673:106673(0) ack 72106 win 64512
>02:34:12.245487 IP (tos 0x0, ttl 128, id 49091, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106673:106736(63) ack 72106 win 64512
>02:34:12.250728 IP (tos 0x0, ttl  64, id 59243, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 72106:73366(1260) ack 106736 win 7560
>02:34:12.251775 IP (tos 0x0, ttl  64, id 59244, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 73366:74626(1260) ack 106736 win 7560
>02:34:12.251917 IP (tos 0x0, ttl 128, id 49092, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106736:106736(0) ack 74626 win 64512
>02:34:12.251952 IP (tos 0x0, ttl  64, id 59245, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 74626:75886(1260) ack 106736 win 7560
>02:34:12.252021 IP (tos 0x0, ttl  64, id 59246, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 75886:76449(563) ack 106736 win 7560
>02:34:12.252755 IP (tos 0x0, ttl 128, id 49093, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106736:106736(0) ack 76449 win 64512
>02:34:12.292349 IP (tos 0x0, ttl 128, id 49094, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106736:106799(63) ack 76449 win 64512
>02:34:12.299192 IP (tos 0x0, ttl  64, id 59247, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 76449:77709(1260) ack 106799 win 7560
>02:34:12.299915 IP (tos 0x0, ttl  64, id 59248, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 77709:78969(1260) ack 106799 win 7560
>02:34:12.300013 IP (tos 0x0, ttl 128, id 49095, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106799:106799(0) ack 78969 win 64512
>02:34:12.300768 IP (tos 0x0, ttl  64, id 59249, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 78969:80229(1260) ack 106799 win 7560
>02:34:12.300841 IP (tos 0x0, ttl  64, id 59250, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 80229:80792(563) ack 106799 win 7560
>02:34:12.300919 IP (tos 0x0, ttl 128, id 49096, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106799:106799(0) ack 80792 win 64512
>02:34:12.310795 IP (tos 0x0, ttl 128, id 49097, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106799:106862(63) ack 80792 win 64512
>02:34:12.316750 IP (tos 0x0, ttl  64, id 59251, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 80792:82052(1260) ack 106862 win 7560
>02:34:12.316960 IP (tos 0x0, ttl  64, id 59252, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 82052:83312(1260) ack 106862 win 7560
>02:34:12.317743 IP (tos 0x0, ttl 128, id 49098, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106862:106862(0) ack 83312 win 64512
>02:34:12.317774 IP (tos 0x0, ttl  64, id 59253, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 83312:84572(1260) ack 106862 win 7560
>02:34:12.317878 IP (tos 0x0, ttl  64, id 59254, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 84572:85135(563) ack 106862 win 7560
>02:34:12.317956 IP (tos 0x0, ttl 128, id 49099, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106862:106862(0) ack 85135 win 64512
>02:34:12.325935 IP (tos 0x0, ttl 128, id 49100, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106862:106925(63) ack 85135 win 64512
>02:34:12.331000 IP (tos 0x0, ttl  64, id 59255, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 85135:86395(1260) ack 106925 win 7560
>02:34:12.331898 IP (tos 0x0, ttl  64, id 59256, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 86395:87655(1260) ack 106925 win 7560
>02:34:12.331991 IP (tos 0x0, ttl 128, id 49101, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106925:106925(0) ack 87655 win 64512
>02:34:12.332758 IP (tos 0x0, ttl  64, id 59257, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 87655:88915(1260) ack 106925 win 7560
>02:34:12.332833 IP (tos 0x0, ttl  64, id 59258, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 88915:89478(563) ack 106925 win 7560
>02:34:12.333006 IP (tos 0x0, ttl 128, id 49102, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106925:106925(0) ack 89478 win 64512
>02:34:12.342103 IP (tos 0x0, ttl 128, id 49103, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106925:106988(63) ack 89478 win 64512
>02:34:12.347754 IP (tos 0x0, ttl  64, id 59259, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 89478:90738(1260) ack 106988 win 7560
>02:34:12.347958 IP (tos 0x0, ttl  64, id 59260, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 90738:91998(1260) ack 106988 win 7560
>02:34:12.348734 IP (tos 0x0, ttl 128, id 49104, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106988:106988(0) ack 91998 win 64512
>02:34:12.348765 IP (tos 0x0, ttl  64, id 59261, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 91998:93258(1260) ack 106988 win 7560
>02:34:12.348866 IP (tos 0x0, ttl  64, id 59262, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 93258:93821(563) ack 106988 win 7560
>02:34:12.348993 IP (tos 0x0, ttl 128, id 49105, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 106988:106988(0) ack 93821 win 64512
>02:34:12.355224 IP (tos 0x0, ttl 128, id 49106, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 106988:107051(63) ack 93821 win 64512
>02:34:12.360837 IP (tos 0x0, ttl  64, id 59263, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 93821:95081(1260) ack 107051 win 7560
>02:34:12.361746 IP (tos 0x0, ttl  64, id 59264, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 95081:96341(1260) ack 107051 win 7560
>02:34:12.361842 IP (tos 0x0, ttl 128, id 49107, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 107051:107051(0) ack 96341 win 64512
>02:34:12.361872 IP (tos 0x0, ttl  64, id 59265, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 96341:97601(1260) ack 107051 win 7560
>02:34:12.361976 IP (tos 0x0, ttl  64, id 59266, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 97601:98164(563) ack 107051 win 7560
>02:34:12.362736 IP (tos 0x0, ttl 128, id 49108, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 107051:107051(0) ack 98164 win 64512
>02:34:12.370305 IP (tos 0x0, ttl 128, id 49109, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 107051:107114(63) ack 98164 win 64512
>02:34:12.375947 IP (tos 0x0, ttl  64, id 59267, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 98164:99424(1260) ack 107114 win 7560
>02:34:12.376885 IP (tos 0x0, ttl  64, id 59268, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 99424:100684(1260) ack 107114 win 7560
>02:34:12.376983 IP (tos 0x0, ttl 128, id 49110, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 107114:107114(0) ack 100684 win 64512
>02:34:12.377013 IP (tos 0x0, ttl  64, id 59269, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 100684:101944(1260) ack 107114 win 7560
>02:34:12.377708 IP (tos 0x0, ttl  64, id 59270, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 101944:102507(563) ack 107114 win 7560
>02:34:12.377787 IP (tos 0x0, ttl 128, id 49111, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 107114:107114(0) ack 102507 win 64512
>02:34:12.384756 IP (tos 0x0, ttl 128, id 49112, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 107114:107177(63) ack 102507 win 64512
>02:34:12.389866 IP (tos 0x0, ttl  64, id 59271, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 102507:103767(1260) ack 107177 win 7560
>02:34:12.390839 IP (tos 0x0, ttl  64, id 59272, offset 0, flags [DF], proto 6, length: 1195) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 103767:104922(1155) ack 107177 win 7560
>02:34:12.390947 IP (tos 0x0, ttl 128, id 49113, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 107177:107177(0) ack 104922 win 64512
>02:34:12.397708 IP (tos 0x0, ttl 128, id 49114, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 107177:108437(1260) ack 104922 win 64512
>02:34:12.397713 IP (tos 0x0, ttl 128, id 49115, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 108437:109697(1260) ack 104922 win 64512
>02:34:12.397818 IP (tos 0x0, ttl  64, id 59273, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 104922:104922(0) ack 109697 win 7560
>02:34:12.397715 IP (tos 0x0, ttl 128, id 49116, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 109697:110957(1260) ack 104922 win 64512
>02:34:12.397717 IP (tos 0x0, ttl 128, id 49117, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 110957:111525(568) ack 104922 win 64512
>02:34:12.402712 IP (tos 0x0, ttl  64, id 59274, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 104922:104922(0) ack 111525 win 6300
>02:34:12.406944 IP (tos 0x0, ttl  64, id 59275, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 104922:104973(51) ack 111525 win 7560
>02:34:12.413847 IP (tos 0x0, ttl 128, id 49118, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 111525:112785(1260) ack 104973 win 64461
>02:34:12.413851 IP (tos 0x0, ttl 128, id 49119, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 112785:114045(1260) ack 104973 win 64461
>02:34:12.413941 IP (tos 0x0, ttl  64, id 59276, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 104973:104973(0) ack 114045 win 7560
>02:34:12.413854 IP (tos 0x0, ttl 128, id 49120, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 114045:115305(1260) ack 104973 win 64461
>02:34:12.413856 IP (tos 0x0, ttl 128, id 49121, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 115305:115873(568) ack 104973 win 64461
>02:34:12.421856 IP (tos 0x0, ttl  64, id 59277, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 104973:104973(0) ack 115873 win 6300
>02:34:12.427734 IP (tos 0x0, ttl  64, id 59278, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 104973:105024(51) ack 115873 win 7560
>02:34:12.432921 IP (tos 0x0, ttl 128, id 49122, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 115873:117133(1260) ack 105024 win 64410
>02:34:12.432925 IP (tos 0x0, ttl 128, id 49123, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 117133:118393(1260) ack 105024 win 64410
>02:34:12.433709 IP (tos 0x0, ttl  64, id 59279, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105024:105024(0) ack 118393 win 7560
>02:34:12.432927 IP (tos 0x0, ttl 128, id 49124, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 118393:119653(1260) ack 105024 win 64410
>02:34:12.432929 IP (tos 0x0, ttl 128, id 49125, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 119653:120221(568) ack 105024 win 64410
>02:34:12.438821 IP (tos 0x0, ttl  64, id 59280, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105024:105024(0) ack 120221 win 6300
>02:34:12.443892 IP (tos 0x0, ttl  64, id 59281, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105024:105075(51) ack 120221 win 7560
>02:34:12.448791 IP (tos 0x0, ttl 128, id 49126, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 120221:121481(1260) ack 105075 win 64359
>02:34:12.448795 IP (tos 0x0, ttl 128, id 49127, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 121481:122741(1260) ack 105075 win 64359
>02:34:12.449747 IP (tos 0x0, ttl  64, id 59282, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105075:105075(0) ack 122741 win 7560
>02:34:12.448797 IP (tos 0x0, ttl 128, id 49128, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 122741:124001(1260) ack 105075 win 64359
>02:34:12.448799 IP (tos 0x0, ttl 128, id 49129, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 124001:124569(568) ack 105075 win 64359
>02:34:12.454726 IP (tos 0x0, ttl  64, id 59283, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105075:105075(0) ack 124569 win 6300
>02:34:12.461759 IP (tos 0x0, ttl  64, id 59284, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105075:105126(51) ack 124569 win 7560
>02:34:12.466879 IP (tos 0x0, ttl 128, id 49130, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 124569:125829(1260) ack 105126 win 64308
>02:34:12.466884 IP (tos 0x0, ttl 128, id 49131, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 125829:127089(1260) ack 105126 win 64308
>02:34:12.466972 IP (tos 0x0, ttl  64, id 59285, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105126:105126(0) ack 127089 win 7560
>02:34:12.466886 IP (tos 0x0, ttl 128, id 49132, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 127089:128349(1260) ack 105126 win 64308
>02:34:12.466888 IP (tos 0x0, ttl 128, id 49133, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 128349:128917(568) ack 105126 win 64308
>02:34:12.472917 IP (tos 0x0, ttl  64, id 59286, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105126:105126(0) ack 128917 win 6300
>02:34:12.478698 IP (tos 0x0, ttl  64, id 59287, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105126:105177(51) ack 128917 win 7560
>02:34:12.482825 IP (tos 0x0, ttl 128, id 49134, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 128917:130177(1260) ack 105177 win 64257
>02:34:12.486689 IP (tos 0x0, ttl 128, id 49135, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 130177:131437(1260) ack 105177 win 64257
>02:34:12.486693 IP (tos 0x0, ttl 128, id 49136, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 131437:132697(1260) ack 105177 win 64257
>02:34:12.486695 IP (tos 0x0, ttl 128, id 49137, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 132697:133265(568) ack 105177 win 64257
>02:34:12.488940 IP (tos 0x0, ttl  64, id 59288, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105177:105177(0) ack 133265 win 7560
>02:34:12.492732 IP (tos 0x0, ttl  64, id 59289, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105177:105228(51) ack 133265 win 7560
>02:34:12.497818 IP (tos 0x0, ttl 128, id 49138, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 133265:134525(1260) ack 105228 win 64206
>02:34:12.502133 IP (tos 0x0, ttl 128, id 49139, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 134525:135785(1260) ack 105228 win 64206
>02:34:12.502137 IP (tos 0x0, ttl 128, id 49140, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 135785:137045(1260) ack 105228 win 64206
>02:34:12.502139 IP (tos 0x0, ttl 128, id 49141, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 137045:137613(568) ack 105228 win 64206
>02:34:12.504917 IP (tos 0x0, ttl  64, id 59290, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105228:105228(0) ack 137613 win 7560
>02:34:12.508746 IP (tos 0x0, ttl  64, id 59291, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105228:105279(51) ack 137613 win 7560
>02:34:12.513317 IP (tos 0x0, ttl 128, id 49142, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 137613:138873(1260) ack 105279 win 64155
>02:34:12.513656 IP (tos 0x0, ttl 128, id 49143, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 138873:140133(1260) ack 105279 win 64155
>02:34:12.514126 IP (tos 0x0, ttl  64, id 59292, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105279:105279(0) ack 140133 win 7560
>02:34:12.513658 IP (tos 0x0, ttl 128, id 49144, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 140133:141393(1260) ack 105279 win 64155
>02:34:12.513660 IP (tos 0x0, ttl 128, id 49145, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 141393:141961(568) ack 105279 win 64155
>02:34:12.519723 IP (tos 0x0, ttl  64, id 59293, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105279:105279(0) ack 141961 win 6300
>02:34:12.523739 IP (tos 0x0, ttl  64, id 59294, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105279:105330(51) ack 141961 win 7560
>02:34:12.529095 IP (tos 0x0, ttl 128, id 49146, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 141961:143221(1260) ack 105330 win 64104
>02:34:12.533787 IP (tos 0x0, ttl 128, id 49147, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 143221:144481(1260) ack 105330 win 64104
>02:34:12.533790 IP (tos 0x0, ttl 128, id 49148, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 144481:145741(1260) ack 105330 win 64104
>02:34:12.533793 IP (tos 0x0, ttl 128, id 49149, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 145741:146309(568) ack 105330 win 64104
>02:34:12.536685 IP (tos 0x0, ttl  64, id 59295, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105330:105330(0) ack 146309 win 7560
>02:34:12.539848 IP (tos 0x0, ttl  64, id 59296, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105330:105381(51) ack 146309 win 7560
>02:34:12.546876 IP (tos 0x0, ttl 128, id 49150, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 146309:147569(1260) ack 105381 win 64053
>02:34:12.546880 IP (tos 0x0, ttl 128, id 49151, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 147569:148829(1260) ack 105381 win 64053
>02:34:12.546967 IP (tos 0x0, ttl  64, id 59297, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105381:105381(0) ack 148829 win 7560
>02:34:12.546882 IP (tos 0x0, ttl 128, id 49152, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 148829:150089(1260) ack 105381 win 64053
>02:34:12.546884 IP (tos 0x0, ttl 128, id 49153, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 150089:150657(568) ack 105381 win 64053
>02:34:12.550916 IP (tos 0x0, ttl  64, id 59298, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105381:105381(0) ack 150657 win 6300
>02:34:12.558879 IP (tos 0x0, ttl  64, id 59299, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105381:105432(51) ack 150657 win 7560
>02:34:12.564693 IP (tos 0x0, ttl 128, id 49154, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 150657:151917(1260) ack 105432 win 64002
>02:34:12.568992 IP (tos 0x0, ttl 128, id 49155, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 151917:153177(1260) ack 105432 win 64002
>02:34:12.570740 IP (tos 0x0, ttl  64, id 59300, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105432:105432(0) ack 153177 win 7560
>02:34:12.573835 IP (tos 0x0, ttl 128, id 49156, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 153177:154437(1260) ack 105432 win 64002
>02:34:12.576792 IP (tos 0x0, ttl 128, id 49157, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 154437:155005(568) ack 105432 win 64002
>02:34:12.577862 IP (tos 0x0, ttl  64, id 59301, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105432:105432(0) ack 155005 win 7560
>02:34:12.581707 IP (tos 0x0, ttl  64, id 59302, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105432:105483(51) ack 155005 win 7560
>02:34:12.587821 IP (tos 0x0, ttl 128, id 49158, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 155005:156265(1260) ack 105483 win 63951
>02:34:12.587825 IP (tos 0x0, ttl 128, id 49159, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 156265:157525(1260) ack 105483 win 63951
>02:34:12.587913 IP (tos 0x0, ttl  64, id 59303, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105483:105483(0) ack 157525 win 7560
>02:34:12.587828 IP (tos 0x0, ttl 128, id 49160, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 157525:158785(1260) ack 105483 win 63951
>02:34:12.587830 IP (tos 0x0, ttl 128, id 49161, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 158785:159353(568) ack 105483 win 63951
>02:34:12.592845 IP (tos 0x0, ttl  64, id 59304, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105483:105483(0) ack 159353 win 6300
>02:34:12.596688 IP (tos 0x0, ttl  64, id 59305, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105483:105534(51) ack 159353 win 7560
>02:34:12.602650 IP (tos 0x0, ttl 128, id 49162, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 159353:160613(1260) ack 105534 win 63900
>02:34:12.602654 IP (tos 0x0, ttl 128, id 49163, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 160613:161873(1260) ack 105534 win 63900
>02:34:12.602907 IP (tos 0x0, ttl  64, id 59306, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105534:105534(0) ack 161873 win 7560
>02:34:12.602656 IP (tos 0x0, ttl 128, id 49164, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 161873:163133(1260) ack 105534 win 63900
>02:34:12.602658 IP (tos 0x0, ttl 128, id 49165, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 163133:163701(568) ack 105534 win 63900
>02:34:12.607956 IP (tos 0x0, ttl  64, id 59307, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105534:105534(0) ack 163701 win 6300
>02:34:12.612855 IP (tos 0x0, ttl  64, id 59308, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105534:105585(51) ack 163701 win 7560
>02:34:12.617710 IP (tos 0x0, ttl 128, id 49166, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 163701:164961(1260) ack 105585 win 63849
>02:34:12.617715 IP (tos 0x0, ttl 128, id 49167, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 164961:166221(1260) ack 105585 win 63849
>02:34:12.618702 IP (tos 0x0, ttl  64, id 59309, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105585:105585(0) ack 166221 win 7560
>02:34:12.617717 IP (tos 0x0, ttl 128, id 49168, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 166221:167481(1260) ack 105585 win 63849
>02:34:12.617719 IP (tos 0x0, ttl 128, id 49169, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 167481:168049(568) ack 105585 win 63849
>02:34:12.622949 IP (tos 0x0, ttl  64, id 59310, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105585:105585(0) ack 168049 win 6300
>02:34:12.627779 IP (tos 0x0, ttl  64, id 59311, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105585:105636(51) ack 168049 win 7560
>02:34:12.634771 IP (tos 0x0, ttl 128, id 49170, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 168049:169309(1260) ack 105636 win 63798
>02:34:12.634775 IP (tos 0x0, ttl 128, id 49171, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 169309:170569(1260) ack 105636 win 63798
>02:34:12.635732 IP (tos 0x0, ttl  64, id 59312, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105636:105636(0) ack 170569 win 7560
>02:34:12.634777 IP (tos 0x0, ttl 128, id 49172, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 170569:171829(1260) ack 105636 win 63798
>02:34:12.634779 IP (tos 0x0, ttl 128, id 49173, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 171829:172397(568) ack 105636 win 63798
>02:34:12.640701 IP (tos 0x0, ttl  64, id 59313, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105636:105636(0) ack 172397 win 6300
>02:34:12.644734 IP (tos 0x0, ttl  64, id 59314, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105636:105687(51) ack 172397 win 7560
>02:34:12.652327 IP (tos 0x0, ttl 128, id 49174, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 172397:173657(1260) ack 105687 win 63747
>02:34:12.652332 IP (tos 0x0, ttl 128, id 49175, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 173657:174917(1260) ack 105687 win 63747
>02:34:12.652421 IP (tos 0x0, ttl  64, id 59315, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105687:105687(0) ack 174917 win 7560
>02:34:12.652335 IP (tos 0x0, ttl 128, id 49176, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 174917:176177(1260) ack 105687 win 63747
>02:34:12.652337 IP (tos 0x0, ttl 128, id 49177, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 176177:176745(568) ack 105687 win 63747
>02:34:12.656940 IP (tos 0x0, ttl  64, id 59316, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105687:105687(0) ack 176745 win 6300
>02:34:12.661674 IP (tos 0x0, ttl  64, id 59317, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105687:105738(51) ack 176745 win 7560
>02:34:12.667843 IP (tos 0x0, ttl 128, id 49178, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 176745:178005(1260) ack 105738 win 63696
>02:34:12.671880 IP (tos 0x0, ttl 128, id 49179, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 178005:179265(1260) ack 105738 win 63696
>02:34:12.672867 IP (tos 0x0, ttl  64, id 59318, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105738:105738(0) ack 179265 win 7560
>02:34:12.675888 IP (tos 0x0, ttl 128, id 49180, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 179265:180525(1260) ack 105738 win 63696
>02:34:12.678856 IP (tos 0x0, ttl 128, id 49181, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 180525:181093(568) ack 105738 win 63696
>02:34:12.680698 IP (tos 0x0, ttl  64, id 59319, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105738:105738(0) ack 181093 win 7560
>02:34:12.685779 IP (tos 0x0, ttl  64, id 59320, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105738:105789(51) ack 181093 win 7560
>02:34:12.690295 IP (tos 0x0, ttl 128, id 49182, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 181093:182353(1260) ack 105789 win 63645
>02:34:12.690299 IP (tos 0x0, ttl 128, id 49183, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 182353:183613(1260) ack 105789 win 63645
>02:34:12.690900 IP (tos 0x0, ttl  64, id 59321, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105789:105789(0) ack 183613 win 7560
>02:34:12.690301 IP (tos 0x0, ttl 128, id 49184, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 183613:184873(1260) ack 105789 win 63645
>02:34:12.690760 IP (tos 0x0, ttl 128, id 49185, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 184873:185441(568) ack 105789 win 63645
>02:34:12.695777 IP (tos 0x0, ttl  64, id 59322, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105789:105789(0) ack 185441 win 6300
>02:34:12.699863 IP (tos 0x0, ttl  64, id 59323, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105789:105840(51) ack 185441 win 7560
>02:34:12.705743 IP (tos 0x0, ttl 128, id 49186, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 185441:186701(1260) ack 105840 win 63594
>02:34:12.705747 IP (tos 0x0, ttl 128, id 49187, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 186701:187961(1260) ack 105840 win 63594
>02:34:12.705833 IP (tos 0x0, ttl  64, id 59324, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105840:105840(0) ack 187961 win 7560
>02:34:12.705749 IP (tos 0x0, ttl 128, id 49188, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 187961:189221(1260) ack 105840 win 63594
>02:34:12.705751 IP (tos 0x0, ttl 128, id 49189, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 189221:189789(568) ack 105840 win 63594
>02:34:12.710837 IP (tos 0x0, ttl  64, id 59325, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105840:105840(0) ack 189789 win 6300
>02:34:12.714828 IP (tos 0x0, ttl  64, id 59326, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105840:105891(51) ack 189789 win 7560
>02:34:12.719717 IP (tos 0x0, ttl 128, id 49190, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 189789:191049(1260) ack 105891 win 63543
>02:34:12.719721 IP (tos 0x0, ttl 128, id 49191, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 191049:192309(1260) ack 105891 win 63543
>02:34:12.719809 IP (tos 0x0, ttl  64, id 59327, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105891:105891(0) ack 192309 win 7560
>02:34:12.719723 IP (tos 0x0, ttl 128, id 49192, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 192309:193569(1260) ack 105891 win 63543
>02:34:12.719725 IP (tos 0x0, ttl 128, id 49193, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 193569:194137(568) ack 105891 win 63543
>02:34:12.724867 IP (tos 0x0, ttl  64, id 59328, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105891:105891(0) ack 194137 win 6300
>02:34:12.730256 IP (tos 0x0, ttl  64, id 59329, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 105891:105942(51) ack 194137 win 7560
>02:34:12.737825 IP (tos 0x0, ttl 128, id 49194, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 194137:195397(1260) ack 105942 win 63492
>02:34:12.737830 IP (tos 0x0, ttl 128, id 49195, offset 0, flags [DF], proto 6, length: 1288) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 195397:196645(1248) ack 105942 win 63492
>02:34:12.737919 IP (tos 0x0, ttl  64, id 59330, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105942:105942(0) ack 196645 win 7560
>02:34:12.766781 IP (tos 0x0, ttl  64, id 59331, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 105942:107202(1260) ack 196645 win 7560
>02:34:12.767701 IP (tos 0x0, ttl  64, id 59332, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 107202:108462(1260) ack 196645 win 7560
>02:34:12.767799 IP (tos 0x0, ttl 128, id 49196, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196645:196645(0) ack 108462 win 64512
>02:34:12.767832 IP (tos 0x0, ttl  64, id 59333, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 108462:109722(1260) ack 196645 win 7560
>02:34:12.767941 IP (tos 0x0, ttl  64, id 59334, offset 0, flags [DF], proto 6, length: 600) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 109722:110282(560) ack 196645 win 7560
>02:34:12.768700 IP (tos 0x0, ttl 128, id 49197, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196645:196645(0) ack 110282 win 64512
>02:34:12.775724 IP (tos 0x0, ttl 128, id 49198, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 196645:196708(63) ack 110282 win 64512
>02:34:12.782674 IP (tos 0x0, ttl  64, id 59335, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 110282:111542(1260) ack 196708 win 7560
>02:34:12.782887 IP (tos 0x0, ttl  64, id 59336, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 111542:112802(1260) ack 196708 win 7560
>02:34:12.783699 IP (tos 0x0, ttl 128, id 49199, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196708:196708(0) ack 112802 win 64512
>02:34:12.783734 IP (tos 0x0, ttl  64, id 59337, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 112802:114062(1260) ack 196708 win 7560
>02:34:12.783802 IP (tos 0x0, ttl  64, id 59338, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 114062:114625(563) ack 196708 win 7560
>02:34:12.783882 IP (tos 0x0, ttl 128, id 49200, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196708:196708(0) ack 114625 win 64512
>02:34:12.791964 IP (tos 0x0, ttl 128, id 49201, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 196708:196771(63) ack 114625 win 64512
>02:34:12.796883 IP (tos 0x0, ttl  64, id 59339, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 114625:115885(1260) ack 196771 win 7560
>02:34:12.797785 IP (tos 0x0, ttl  64, id 59340, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 115885:117145(1260) ack 196771 win 7560
>02:34:12.797924 IP (tos 0x0, ttl 128, id 49202, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196771:196771(0) ack 117145 win 64512
>02:34:12.797958 IP (tos 0x0, ttl  64, id 59341, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 117145:118405(1260) ack 196771 win 7560
>02:34:12.798681 IP (tos 0x0, ttl  64, id 59342, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 118405:118968(563) ack 196771 win 7560
>02:34:12.798764 IP (tos 0x0, ttl 128, id 49203, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196771:196771(0) ack 118968 win 64512
>02:34:12.807993 IP (tos 0x0, ttl 128, id 49204, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 196771:196834(63) ack 118968 win 64512
>02:34:12.813839 IP (tos 0x0, ttl  64, id 59343, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 118968:120228(1260) ack 196834 win 7560
>02:34:12.814761 IP (tos 0x0, ttl  64, id 59344, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 120228:121488(1260) ack 196834 win 7560
>02:34:12.814908 IP (tos 0x0, ttl 128, id 49205, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196834:196834(0) ack 121488 win 64512
>02:34:12.814940 IP (tos 0x0, ttl  64, id 59345, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 121488:122748(1260) ack 196834 win 7560
>02:34:12.815820 IP (tos 0x0, ttl  64, id 59346, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 122748:123311(563) ack 196834 win 7560
>02:34:12.815933 IP (tos 0x0, ttl 128, id 49206, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196834:196834(0) ack 123311 win 64512
>02:34:12.823117 IP (tos 0x0, ttl 128, id 49207, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 196834:196897(63) ack 123311 win 64512
>02:34:12.828831 IP (tos 0x0, ttl  64, id 59347, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 123311:124571(1260) ack 196897 win 7560
>02:34:12.829792 IP (tos 0x0, ttl  64, id 59348, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 124571:125831(1260) ack 196897 win 7560
>02:34:12.829893 IP (tos 0x0, ttl 128, id 49208, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196897:196897(0) ack 125831 win 64512
>02:34:12.829922 IP (tos 0x0, ttl  64, id 59349, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 125831:127091(1260) ack 196897 win 7560
>02:34:12.830668 IP (tos 0x0, ttl  64, id 59350, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 127091:127654(563) ack 196897 win 7560
>02:34:12.830748 IP (tos 0x0, ttl 128, id 49209, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196897:196897(0) ack 127654 win 64512
>02:34:12.839686 IP (tos 0x0, ttl 128, id 49210, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 196897:196960(63) ack 127654 win 64512
>02:34:12.844807 IP (tos 0x0, ttl  64, id 59351, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 127654:128914(1260) ack 196960 win 7560
>02:34:12.845752 IP (tos 0x0, ttl  64, id 59352, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 128914:130174(1260) ack 196960 win 7560
>02:34:12.845853 IP (tos 0x0, ttl 128, id 49211, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196960:196960(0) ack 130174 win 64512
>02:34:12.845883 IP (tos 0x0, ttl  64, id 59353, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 130174:131434(1260) ack 196960 win 7560
>02:34:12.846626 IP (tos 0x0, ttl  64, id 59354, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 131434:131997(563) ack 196960 win 7560
>02:34:12.846706 IP (tos 0x0, ttl 128, id 49212, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 196960:196960(0) ack 131997 win 64512
>02:34:12.855219 IP (tos 0x0, ttl 128, id 49213, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 196960:197023(63) ack 131997 win 64512
>02:34:12.860809 IP (tos 0x0, ttl  64, id 59355, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 131997:133257(1260) ack 197023 win 7560
>02:34:12.861767 IP (tos 0x0, ttl  64, id 59356, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 133257:134517(1260) ack 197023 win 7560
>02:34:12.861867 IP (tos 0x0, ttl 128, id 49214, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197023:197023(0) ack 134517 win 64512
>02:34:12.861896 IP (tos 0x0, ttl  64, id 59357, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 134517:135777(1260) ack 197023 win 7560
>02:34:12.862624 IP (tos 0x0, ttl  64, id 59358, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 135777:136340(563) ack 197023 win 7560
>02:34:12.862708 IP (tos 0x0, ttl 128, id 49215, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197023:197023(0) ack 136340 win 64512
>02:34:12.869634 IP (tos 0x0, ttl 128, id 49216, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197023:197086(63) ack 136340 win 64512
>02:34:12.874808 IP (tos 0x0, ttl  64, id 59359, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 136340:137600(1260) ack 197086 win 7560
>02:34:12.875775 IP (tos 0x0, ttl  64, id 59360, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 137600:138860(1260) ack 197086 win 7560
>02:34:12.875873 IP (tos 0x0, ttl 128, id 49217, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197086:197086(0) ack 138860 win 64512
>02:34:12.875902 IP (tos 0x0, ttl  64, id 59361, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 138860:140120(1260) ack 197086 win 7560
>02:34:12.876628 IP (tos 0x0, ttl  64, id 59362, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 140120:140683(563) ack 197086 win 7560
>02:34:12.876708 IP (tos 0x0, ttl 128, id 49218, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197086:197086(0) ack 140683 win 64512
>02:34:12.885811 IP (tos 0x0, ttl 128, id 49219, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197086:197149(63) ack 140683 win 64512
>02:34:12.890917 IP (tos 0x0, ttl  64, id 59363, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 140683:141943(1260) ack 197149 win 7560
>02:34:12.891816 IP (tos 0x0, ttl  64, id 59364, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 141943:143203(1260) ack 197149 win 7560
>02:34:12.891912 IP (tos 0x0, ttl 128, id 49220, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197149:197149(0) ack 143203 win 64512
>02:34:12.892671 IP (tos 0x0, ttl  64, id 59365, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 143203:144463(1260) ack 197149 win 7560
>02:34:12.892746 IP (tos 0x0, ttl  64, id 59366, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 144463:145026(563) ack 197149 win 7560
>02:34:12.892866 IP (tos 0x0, ttl 128, id 49221, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197149:197149(0) ack 145026 win 64512
>02:34:12.901746 IP (tos 0x0, ttl 128, id 49222, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197149:197212(63) ack 145026 win 64512
>02:34:12.906902 IP (tos 0x0, ttl  64, id 59367, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 145026:146286(1260) ack 197212 win 7560
>02:34:12.907804 IP (tos 0x0, ttl  64, id 59368, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 146286:147546(1260) ack 197212 win 7560
>02:34:12.907902 IP (tos 0x0, ttl 128, id 49223, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197212:197212(0) ack 147546 win 64512
>02:34:12.908652 IP (tos 0x0, ttl  64, id 59369, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 147546:148806(1260) ack 197212 win 7560
>02:34:12.908730 IP (tos 0x0, ttl  64, id 59370, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 148806:149369(563) ack 197212 win 7560
>02:34:12.908807 IP (tos 0x0, ttl 128, id 49224, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197212:197212(0) ack 149369 win 64512
>02:34:12.916698 IP (tos 0x0, ttl 128, id 49225, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197212:197275(63) ack 149369 win 64512
>02:34:12.921874 IP (tos 0x0, ttl  64, id 59371, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 149369:150629(1260) ack 197275 win 7560
>02:34:12.922780 IP (tos 0x0, ttl  64, id 59372, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 150629:151889(1260) ack 197275 win 7560
>02:34:12.922877 IP (tos 0x0, ttl 128, id 49226, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197275:197275(0) ack 151889 win 64512
>02:34:12.922906 IP (tos 0x0, ttl  64, id 59373, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 151889:153149(1260) ack 197275 win 7560
>02:34:12.923670 IP (tos 0x0, ttl  64, id 59374, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 153149:153712(563) ack 197275 win 7560
>02:34:12.923758 IP (tos 0x0, ttl 128, id 49227, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197275:197275(0) ack 153712 win 64512
>02:34:12.930233 IP (tos 0x0, ttl 128, id 49228, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197275:197338(63) ack 153712 win 64512
>02:34:12.936738 IP (tos 0x0, ttl  64, id 59375, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 153712:154972(1260) ack 197338 win 7560
>02:34:12.937692 IP (tos 0x0, ttl  64, id 59376, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 154972:156232(1260) ack 197338 win 7560
>02:34:12.937821 IP (tos 0x0, ttl 128, id 49229, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197338:197338(0) ack 156232 win 64512
>02:34:12.937857 IP (tos 0x0, ttl  64, id 59377, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 156232:157492(1260) ack 197338 win 7560
>02:34:12.937926 IP (tos 0x0, ttl  64, id 59378, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 157492:158055(563) ack 197338 win 7560
>02:34:12.938670 IP (tos 0x0, ttl 128, id 49230, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197338:197338(0) ack 158055 win 64512
>02:34:12.947051 IP (tos 0x0, ttl 128, id 49231, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197338:197401(63) ack 158055 win 64512
>02:34:12.952662 IP (tos 0x0, ttl  64, id 59379, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 158055:159315(1260) ack 197401 win 7560
>02:34:12.952867 IP (tos 0x0, ttl  64, id 59380, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 159315:160575(1260) ack 197401 win 7560
>02:34:12.953647 IP (tos 0x0, ttl 128, id 49232, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197401:197401(0) ack 160575 win 64512
>02:34:12.953678 IP (tos 0x0, ttl  64, id 59381, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 160575:161835(1260) ack 197401 win 7560
>02:34:12.953830 IP (tos 0x0, ttl  64, id 59382, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 161835:162398(563) ack 197401 win 7560
>02:34:12.953914 IP (tos 0x0, ttl 128, id 49233, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197401:197401(0) ack 162398 win 64512
>02:34:12.961911 IP (tos 0x0, ttl 128, id 49234, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197401:197464(63) ack 162398 win 64512
>02:34:12.967634 IP (tos 0x0, ttl  64, id 59383, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 162398:163658(1260) ack 197464 win 7560
>02:34:12.967856 IP (tos 0x0, ttl  64, id 59384, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 163658:164918(1260) ack 197464 win 7560
>02:34:12.968667 IP (tos 0x0, ttl 128, id 49235, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197464:197464(0) ack 164918 win 64512
>02:34:12.968700 IP (tos 0x0, ttl  64, id 59385, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 164918:166178(1260) ack 197464 win 7560
>02:34:12.968770 IP (tos 0x0, ttl  64, id 59386, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 166178:166741(563) ack 197464 win 7560
>02:34:12.968853 IP (tos 0x0, ttl 128, id 49236, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197464:197464(0) ack 166741 win 64512
>02:34:12.975930 IP (tos 0x0, ttl 128, id 49237, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197464:197527(63) ack 166741 win 64512
>02:34:12.981672 IP (tos 0x0, ttl  64, id 59387, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 166741:168001(1260) ack 197527 win 7560
>02:34:12.981877 IP (tos 0x0, ttl  64, id 59388, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 168001:169261(1260) ack 197527 win 7560
>02:34:12.982644 IP (tos 0x0, ttl 128, id 49238, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197527:197527(0) ack 169261 win 64512
>02:34:12.982674 IP (tos 0x0, ttl  64, id 59389, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 169261:170521(1260) ack 197527 win 7560
>02:34:12.982778 IP (tos 0x0, ttl  64, id 59390, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 170521:171084(563) ack 197527 win 7560
>02:34:12.982895 IP (tos 0x0, ttl 128, id 49239, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197527:197527(0) ack 171084 win 64512
>02:34:12.990653 IP (tos 0x0, ttl 128, id 49240, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197527:197590(63) ack 171084 win 64512
>02:34:12.995850 IP (tos 0x0, ttl  64, id 59391, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 171084:172344(1260) ack 197590 win 7560
>02:34:12.996841 IP (tos 0x0, ttl  64, id 59392, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 172344:173604(1260) ack 197590 win 7560
>02:34:12.996946 IP (tos 0x0, ttl 128, id 49241, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197590:197590(0) ack 173604 win 64512
>02:34:12.996989 IP (tos 0x0, ttl  64, id 59393, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 173604:174864(1260) ack 197590 win 7560
>02:34:12.997677 IP (tos 0x0, ttl  64, id 59394, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 174864:175427(563) ack 197590 win 7560
>02:34:12.997756 IP (tos 0x0, ttl 128, id 49242, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197590:197590(0) ack 175427 win 64512
>02:34:13.004669 IP (tos 0x0, ttl 128, id 49243, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197590:197653(63) ack 175427 win 64512
>02:34:13.010655 IP (tos 0x0, ttl  64, id 59395, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 175427:176687(1260) ack 197653 win 7560
>02:34:13.010851 IP (tos 0x0, ttl  64, id 59396, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 176687:177947(1260) ack 197653 win 7560
>02:34:13.011632 IP (tos 0x0, ttl 128, id 49244, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197653:197653(0) ack 177947 win 64512
>02:34:13.011663 IP (tos 0x0, ttl  64, id 59397, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 177947:179207(1260) ack 197653 win 7560
>02:34:13.011768 IP (tos 0x0, ttl  64, id 59398, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 179207:179770(563) ack 197653 win 7560
>02:34:13.011897 IP (tos 0x0, ttl 128, id 49245, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197653:197653(0) ack 179770 win 64512
>02:34:13.019796 IP (tos 0x0, ttl 128, id 49246, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197653:197716(63) ack 179770 win 64512
>02:34:13.025666 IP (tos 0x0, ttl  64, id 59399, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 179770:181030(1260) ack 197716 win 7560
>02:34:13.025865 IP (tos 0x0, ttl  64, id 59400, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 181030:182290(1260) ack 197716 win 7560
>02:34:13.026685 IP (tos 0x0, ttl 128, id 49247, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197716:197716(0) ack 182290 win 64512
>02:34:13.026718 IP (tos 0x0, ttl  64, id 59401, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 182290:183550(1260) ack 197716 win 7560
>02:34:13.026829 IP (tos 0x0, ttl  64, id 59402, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 183550:184113(563) ack 197716 win 7560
>02:34:13.026909 IP (tos 0x0, ttl 128, id 49248, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197716:197716(0) ack 184113 win 64512
>02:34:13.034665 IP (tos 0x0, ttl 128, id 49249, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197716:197779(63) ack 184113 win 64512
>02:34:13.038382 IP (tos 0x0, ttl  64, id 59403, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 184113:185373(1260) ack 197779 win 7560
>02:34:13.039600 IP (tos 0x0, ttl  64, id 59404, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 185373:186633(1260) ack 197779 win 7560
>02:34:13.039729 IP (tos 0x0, ttl 128, id 49250, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197779:197779(0) ack 186633 win 64512
>02:34:13.039760 IP (tos 0x0, ttl  64, id 59405, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 186633:187893(1260) ack 197779 win 7560
>02:34:13.040705 IP (tos 0x0, ttl  64, id 59406, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 187893:188456(563) ack 197779 win 7560
>02:34:13.040824 IP (tos 0x0, ttl 128, id 49251, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197779:197779(0) ack 188456 win 64512
>02:34:13.048601 IP (tos 0x0, ttl 128, id 49252, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197779:197842(63) ack 188456 win 64512
>02:34:13.053882 IP (tos 0x0, ttl  64, id 59407, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 188456:189716(1260) ack 197842 win 7560
>02:34:13.054784 IP (tos 0x0, ttl  64, id 59408, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 189716:190976(1260) ack 197842 win 7560
>02:34:13.054880 IP (tos 0x0, ttl 128, id 49253, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197842:197842(0) ack 190976 win 64512
>02:34:13.055633 IP (tos 0x0, ttl  64, id 59409, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 190976:192236(1260) ack 197842 win 7560
>02:34:13.055711 IP (tos 0x0, ttl  64, id 59410, offset 0, flags [DF], proto 6, length: 603) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 192236:192799(563) ack 197842 win 7560
>02:34:13.055795 IP (tos 0x0, ttl 128, id 49254, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197842:197842(0) ack 192799 win 64512
>02:34:13.063214 IP (tos 0x0, ttl 128, id 49255, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197842:197905(63) ack 192799 win 64512
>02:34:13.068872 IP (tos 0x0, ttl  64, id 59411, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 192799:194059(1260) ack 197905 win 7560
>02:34:13.069797 IP (tos 0x0, ttl  64, id 59412, offset 0, flags [DF], proto 6, length: 1195) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 194059:195214(1155) ack 197905 win 7560
>02:34:13.069903 IP (tos 0x0, ttl 128, id 49256, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197905:197905(0) ack 195214 win 64512
>02:34:14.127463 IP (tos 0x0, ttl 128, id 49259, offset 0, flags [DF], proto 6, length: 48) 192.168.233.1.2153 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2057461851:2057461851(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:14.127514 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2153: S [tcp sum ok] 2785724549:2785724549(0) ack 2057461852 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:14.267569 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2159: S [tcp sum ok] 2794438556:2794438556(0) ack 2059633776 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:14.669354 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.242.1.2158: S [tcp sum ok] 2797719035:2797719035(0) ack 2059548575 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:14.669917 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2156: S [tcp sum ok] 2793801498:2793801498(0) ack 2059479284 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:14.870876 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.242.1.2152: S [tcp sum ok] 2786416580:2786416580(0) ack 2057386653 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:15.272256 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2153: S [tcp sum ok] 2785724549:2785724549(0) ack 2057461852 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:15.473217 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.ninstall: S [tcp sum ok] 2793311935:2793311935(0) ack 2057293355 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:16.233643 IP (tos 0x0, ttl 128, id 49270, offset 0, flags [DF], proto 6, length: 48) 192.168.233.1.2159 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2059633775:2059633775(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:16.233687 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2159: S [tcp sum ok] 2794438556:2794438556(0) ack 2059633776 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:18.646596 IP (tos 0x0, ttl 128, id 49272, offset 0, flags [DF], proto 6, length: 83) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197905:197948(43) ack 195214 win 64512
>02:34:18.648477 IP (tos 0x0, ttl  64, id 59413, offset 0, flags [DF], proto 6, length: 83) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195214:195257(43) ack 197948 win 7560
>02:34:18.650251 IP (tos 0x0, ttl 128, id 49273, offset 0, flags [DF], proto 6, length: 79) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197948:197987(39) ack 195257 win 64469
>02:34:18.654410 IP (tos 0x0, ttl  64, id 59414, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195257:195296(39) ack 197987 win 7560
>02:34:18.757414 IP (tos 0x0, ttl 128, id 49274, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 197987:197987(0) ack 195296 win 64430
>02:34:20.273090 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2159: S [tcp sum ok] 2794438556:2794438556(0) ack 2059633776 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:20.673879 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.242.1.2158: S [tcp sum ok] 2797719035:2797719035(0) ack 2059548575 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:20.674148 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2156: S [tcp sum ok] 2793801498:2793801498(0) ack 2059479284 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:21.150246 IP (tos 0x0, ttl  60, id 62218, offset 0, flags [none], proto 17, length: 52) 192.168.1.1.router > 192.168.1.255.router: [udp sum ok] 
>	RIPv1, Response, length: 24, routes: 1
>	  0.0.0.0, metric: 1
>	0x0000:  0201 0000 0002 0000 0000 0000 0000 0000
>	0x0010:  0000 0000 0000 0001
>02:34:21.274845 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2143: S [tcp sum ok] 2780239381:2780239381(0) ack 2055651906 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:21.510048 IP (tos 0x0, ttl 128, id 49281, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:21.531812 IP (tos 0x0, ttl  64, id 44106, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2142: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:21.532050 IP (tos 0x0, ttl 128, id 49282, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2142 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:21.535857 IP (tos 0x0, ttl 128, id 49283, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2160 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2061660034:2061660034(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:21.535909 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2160: S [tcp sum ok] 2807823805:2807823805(0) ack 2061660035 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:21.537278 IP (tos 0x0, ttl 128, id 49284, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2160 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:21.568796 IP (tos 0x0, ttl 128, id 49285, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2160 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:21.568839 IP (tos 0x0, ttl  64, id 40059, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2160: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:21.588376 IP (tos 0x0, ttl  64, id 40060, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2160: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:21.590264 IP (tos 0x0, ttl 128, id 49286, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2160 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:21.608253 IP (tos 0x0, ttl  64, id 40061, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2160: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:21.612932 IP (tos 0x0, ttl 128, id 49287, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2160 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:21.636424 IP (tos 0x0, ttl  64, id 40062, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2160: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:21.642523 IP (tos 0x0, ttl 128, id 49288, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2160 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:21.668863 IP (tos 0x0, ttl 128, id 49289, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2161 > 192.168.1.28.http: S [tcp sum ok] 2061719096:2061719096(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:21.668913 IP (tos 0x0, ttl  64, id 24, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.http > 192.168.1.20.2161: R [tcp sum ok] 0:0(0) ack 2061719097 win 0
>02:34:21.680469 IP (tos 0x0, ttl  64, id 40063, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2160: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:21.681770 IP (tos 0x0, ttl 128, id 49290, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2160 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:21.687749 IP (tos 0x0, ttl 128, id 49291, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2061785675:2061785675(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:21.687794 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2162: S [tcp sum ok] 2805656165:2805656165(0) ack 2061785676 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:21.688548 IP (tos 0x0, ttl 128, id 49292, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:21.772908 IP (tos 0x0, ttl 128, id 49293, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:21.773881 IP (tos 0x0, ttl  64, id 34874, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2162: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:21.794432 IP (tos 0x0, ttl  64, id 34875, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2162: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:21.799071 IP (tos 0x0, ttl 128, id 49294, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:21.818527 IP (tos 0x0, ttl  64, id 34876, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2162: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:21.825270 IP (tos 0x0, ttl 128, id 49295, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:21.851360 IP (tos 0x0, ttl  64, id 34877, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2162: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:22.055847 IP (tos 0x0, ttl  64, id 34878, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2162: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:22.056323 IP (tos 0x0, ttl 128, id 49296, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:22.173495 IP (tos 0x0, ttl 128, id 49297, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2161 > 192.168.1.28.http: S [tcp sum ok] 2061719096:2061719096(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:22.173559 IP (tos 0x0, ttl  64, id 25, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.http > 192.168.1.20.2161: R [tcp sum ok] 0:0(0) ack 1 win 0
>02:34:22.666859 IP (tos 0x0, ttl 128, id 49298, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2161 > 192.168.1.28.http: S [tcp sum ok] 2061719096:2061719096(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:22.666903 IP (tos 0x0, ttl  64, id 26, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.http > 192.168.1.20.2161: R [tcp sum ok] 0:0(0) ack 1 win 0
>02:34:22.666862 IP (tos 0x0, ttl 128, id 49299, offset 0, flags [DF], proto 6, length: 48) 192.168.233.1.2159 > 192.168.1.28.netbios-ssn: S [tcp sum ok] 2059633775:2059633775(0) win 64512 <mss 1460,nop,nop,sackOK>
>02:34:22.667974 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2159: S [tcp sum ok] 2794438556:2794438556(0) ack 2059633776 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:22.778733 IP (tos 0x0, ttl 128, id 49300, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 197987:198267(280) ack 195296 win 64430
>02:34:22.793201 IP (tos 0x0, ttl  64, id 59415, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195296:195404(108) ack 198267 win 7560
>02:34:22.799733 IP (tos 0x0, ttl 128, id 49301, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 198267:198471(204) ack 195404 win 64322
>02:34:22.807246 IP (tos 0x0, ttl  64, id 59416, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195404:195504(100) ack 198471 win 7560
>02:34:22.813163 IP (tos 0x0, ttl 128, id 49302, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 198471:198675(204) ack 195504 win 64222
>02:34:22.819286 IP (tos 0x0, ttl  64, id 59417, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195504:195604(100) ack 198675 win 7560
>02:34:22.834758 IP (tos 0x0, ttl 128, id 49303, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 198675:198879(204) ack 195604 win 64122
>02:34:22.841137 IP (tos 0x0, ttl  64, id 59418, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195604:195704(100) ack 198879 win 7560
>02:34:22.850691 IP (tos 0x0, ttl 128, id 49304, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 198879:199083(204) ack 195704 win 64022
>02:34:22.857237 IP (tos 0x0, ttl  64, id 59419, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195704:195804(100) ack 199083 win 7560
>02:34:22.874198 IP (tos 0x0, ttl 128, id 49305, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 199083:199287(204) ack 195804 win 63922
>02:34:22.880382 IP (tos 0x0, ttl  64, id 59420, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195804:195904(100) ack 199287 win 7560
>02:34:22.893364 IP (tos 0x0, ttl 128, id 49306, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 199287:199491(204) ack 195904 win 63822
>02:34:22.899334 IP (tos 0x0, ttl  64, id 59421, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 195904:196004(100) ack 199491 win 7560
>02:34:22.910243 IP (tos 0x0, ttl 128, id 49307, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 199491:199695(204) ack 196004 win 63722
>02:34:22.917247 IP (tos 0x0, ttl  64, id 59422, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196004:196104(100) ack 199695 win 7560
>02:34:22.924714 IP (tos 0x0, ttl 128, id 49308, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 199695:199899(204) ack 196104 win 63622
>02:34:22.931292 IP (tos 0x0, ttl  64, id 59423, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196104:196204(100) ack 199899 win 7560
>02:34:22.940286 IP (tos 0x0, ttl 128, id 49309, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 199899:200103(204) ack 196204 win 63522
>02:34:22.946154 IP (tos 0x0, ttl  64, id 59424, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196204:196304(100) ack 200103 win 7560
>02:34:22.954136 IP (tos 0x0, ttl 128, id 49310, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 200103:200307(204) ack 196304 win 63422
>02:34:22.959339 IP (tos 0x0, ttl  64, id 59425, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196304:196404(100) ack 200307 win 7560
>02:34:22.969076 IP (tos 0x0, ttl 128, id 49312, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 200307:200511(204) ack 196404 win 63322
>02:34:22.976149 IP (tos 0x0, ttl  64, id 59426, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196404:196504(100) ack 200511 win 7560
>02:34:22.986701 IP (tos 0x0, ttl 128, id 49313, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 200511:200715(204) ack 196504 win 64512
>02:34:22.993156 IP (tos 0x0, ttl  64, id 59427, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196504:196604(100) ack 200715 win 7560
>02:34:23.004541 IP (tos 0x0, ttl 128, id 49314, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 200715:200919(204) ack 196604 win 64412
>02:34:23.010340 IP (tos 0x0, ttl  64, id 59428, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196604:196704(100) ack 200919 win 7560
>02:34:23.025236 IP (tos 0x0, ttl 128, id 49315, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 200919:201123(204) ack 196704 win 64312
>02:34:23.032188 IP (tos 0x0, ttl  64, id 59429, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196704:196804(100) ack 201123 win 7560
>02:34:23.040546 IP (tos 0x0, ttl 128, id 49316, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 201123:201327(204) ack 196804 win 64212
>02:34:23.046270 IP (tos 0x0, ttl  64, id 59430, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196804:196904(100) ack 201327 win 7560
>02:34:23.059301 IP (tos 0x0, ttl 128, id 49317, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 201327:201531(204) ack 196904 win 64112
>02:34:23.065200 IP (tos 0x0, ttl  64, id 59431, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 196904:197004(100) ack 201531 win 7560
>02:34:23.073124 IP (tos 0x0, ttl 128, id 49318, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 201531:201735(204) ack 197004 win 64012
>02:34:23.079352 IP (tos 0x0, ttl  64, id 59432, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197004:197104(100) ack 201735 win 7560
>02:34:23.088154 IP (tos 0x0, ttl 128, id 49319, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 201735:201939(204) ack 197104 win 63912
>02:34:23.094222 IP (tos 0x0, ttl  64, id 59433, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197104:197204(100) ack 201939 win 7560
>02:34:23.105303 IP (tos 0x0, ttl 128, id 49320, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 201939:202143(204) ack 197204 win 63812
>02:34:23.111203 IP (tos 0x0, ttl  64, id 59434, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197204:197304(100) ack 202143 win 7560
>02:34:23.125402 IP (tos 0x0, ttl 128, id 49321, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 202143:202347(204) ack 197304 win 63712
>02:34:23.131188 IP (tos 0x0, ttl  64, id 59435, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197304:197404(100) ack 202347 win 7560
>02:34:23.142722 IP (tos 0x0, ttl 128, id 49322, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 202347:202551(204) ack 197404 win 63612
>02:34:23.149103 IP (tos 0x0, ttl  64, id 59436, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197404:197504(100) ack 202551 win 7560
>02:34:23.162119 IP (tos 0x0, ttl 128, id 49323, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 202551:202755(204) ack 197504 win 63512
>02:34:23.168197 IP (tos 0x0, ttl  64, id 59437, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197504:197604(100) ack 202755 win 7560
>02:34:23.181369 IP (tos 0x0, ttl 128, id 49324, offset 0, flags [DF], proto 6, length: 244) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 202755:202959(204) ack 197604 win 63412
>02:34:23.188070 IP (tos 0x0, ttl  64, id 59438, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197604:197704(100) ack 202959 win 7560
>02:34:23.194338 IP (tos 0x0, ttl 128, id 49326, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 202959:203091(132) ack 197704 win 63312
>02:34:23.200234 IP (tos 0x0, ttl  64, id 59439, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197704:197812(108) ack 203091 win 7560
>02:34:23.206683 IP (tos 0x0, ttl 128, id 49327, offset 0, flags [DF], proto 6, length: 184) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 203091:203235(144) ack 197812 win 64512
>02:34:23.247954 IP (tos 0x0, ttl  64, id 59440, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 197812:197812(0) ack 203235 win 7560
>02:34:23.274076 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.2146: S [tcp sum ok] 2786981487:2786981487(0) ack 2056388710 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:23.278355 IP (tos 0x0, ttl  64, id 59441, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197812:197912(100) ack 203235 win 7560
>02:34:23.280585 IP (tos 0x0, ttl 128, id 49328, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 203235:204495(1260) ack 197912 win 64412
>02:34:23.280589 IP (tos 0x0, ttl 128, id 49329, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 204495:205755(1260) ack 197912 win 64412
>02:34:23.280678 IP (tos 0x0, ttl  64, id 59442, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 197912:197912(0) ack 205755 win 7560
>02:34:23.280591 IP (tos 0x0, ttl 128, id 49330, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 205755:207015(1260) ack 197912 win 64412
>02:34:23.280593 IP (tos 0x0, ttl 128, id 49331, offset 0, flags [DF], proto 6, length: 608) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 207015:207583(568) ack 197912 win 64412
>02:34:23.282226 IP (tos 0x0, ttl  64, id 59443, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 197912:197912(0) ack 207583 win 6300
>02:34:23.284259 IP (tos 0x0, ttl  64, id 59444, offset 0, flags [DF], proto 6, length: 91) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 197912:197963(51) ack 207583 win 7560
>02:34:23.285773 IP (tos 0x0, ttl 128, id 49332, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 207583:208843(1260) ack 197963 win 64361
>02:34:23.285777 IP (tos 0x0, ttl 128, id 49333, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 208843:210103(1260) ack 197963 win 64361
>02:34:23.285858 IP (tos 0x0, ttl  64, id 59445, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 197963:197963(0) ack 210103 win 7560
>02:34:23.285779 IP (tos 0x0, ttl 128, id 49334, offset 0, flags [DF], proto 6, length: 656) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 210103:210719(616) ack 197963 win 64361
>02:34:23.307769 IP (tos 0x0, ttl  64, id 59446, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 197963:199223(1260) ack 210719 win 7560
>02:34:23.308121 IP (tos 0x0, ttl  64, id 59447, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 199223:200483(1260) ack 210719 win 7560
>02:34:23.308228 IP (tos 0x0, ttl 128, id 49335, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 210719:210719(0) ack 200483 win 64512
>02:34:23.308275 IP (tos 0x0, ttl  64, id 59448, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 200483:201743(1260) ack 210719 win 7560
>02:34:23.308524 IP (tos 0x0, ttl  64, id 59449, offset 0, flags [DF], proto 6, length: 600) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 201743:202303(560) ack 210719 win 7560
>02:34:23.308635 IP (tos 0x0, ttl 128, id 49336, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 210719:210719(0) ack 202303 win 64512
>02:34:23.315765 IP (tos 0x0, ttl 128, id 49337, offset 0, flags [DF], proto 6, length: 103) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 210719:210782(63) ack 202303 win 64512
>02:34:23.317602 IP (tos 0x0, ttl  64, id 59450, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 202303:203563(1260) ack 210782 win 7560
>02:34:23.317949 IP (tos 0x0, ttl  64, id 59451, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 203563:204823(1260) ack 210782 win 7560
>02:34:23.318087 IP (tos 0x0, ttl 128, id 49338, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 210782:210782(0) ack 204823 win 64512
>02:34:23.318126 IP (tos 0x0, ttl  64, id 59452, offset 0, flags [DF], proto 6, length: 615) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 204823:205398(575) ack 210782 win 7560
>02:34:23.320443 IP (tos 0x0, ttl 128, id 49339, offset 0, flags [DF], proto 6, length: 192) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 210782:210934(152) ack 205398 win 63937
>02:34:23.323336 IP (tos 0x0, ttl  64, id 59453, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 205398:205494(96) ack 210934 win 7560
>02:34:23.324907 IP (tos 0x0, ttl 128, id 49340, offset 0, flags [DF], proto 6, length: 192) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 210934:211086(152) ack 205494 win 63841
>02:34:23.327456 IP (tos 0x0, ttl  64, id 59454, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 205494:205590(96) ack 211086 win 7560
>02:34:23.329450 IP (tos 0x0, ttl 128, id 49341, offset 0, flags [DF], proto 6, length: 192) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 211086:211238(152) ack 205590 win 63745
>02:34:23.331676 IP (tos 0x0, ttl  64, id 59455, offset 0, flags [DF], proto 6, length: 196) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 205590:205746(156) ack 211238 win 7560
>02:34:23.333637 IP (tos 0x0, ttl 128, id 49342, offset 0, flags [DF], proto 6, length: 224) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 211238:211422(184) ack 205746 win 63589
>02:34:23.336991 IP (tos 0x0, ttl  64, id 59456, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 205746:205842(96) ack 211422 win 7560
>02:34:23.338680 IP (tos 0x0, ttl 128, id 49343, offset 0, flags [DF], proto 6, length: 224) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 211422:211606(184) ack 205842 win 63493
>02:34:23.340584 IP (tos 0x0, ttl  64, id 59457, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 205842:205942(100) ack 211606 win 7560
>02:34:23.341845 IP (tos 0x0, ttl 128, id 49344, offset 0, flags [DF], proto 6, length: 224) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 211606:211790(184) ack 205942 win 63393
>02:34:23.344079 IP (tos 0x0, ttl  64, id 59458, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 205942:206042(100) ack 211790 win 7560
>02:34:23.345413 IP (tos 0x0, ttl 128, id 49345, offset 0, flags [DF], proto 6, length: 224) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 211790:211974(184) ack 206042 win 63293
>02:34:23.347315 IP (tos 0x0, ttl  64, id 59459, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 206042:207302(1260) ack 211974 win 7560
>02:34:23.347547 IP (tos 0x0, ttl  64, id 59460, offset 0, flags [DF], proto 6, length: 96) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 207302:207358(56) ack 211974 win 7560
>02:34:23.347644 IP (tos 0x0, ttl 128, id 49346, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 211974:211974(0) ack 207358 win 64512
>02:34:23.354638 IP (tos 0x0, ttl 128, id 49347, offset 0, flags [DF], proto 6, length: 208) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 211974:212142(168) ack 207358 win 64512
>02:34:23.356812 IP (tos 0x0, ttl  64, id 59461, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 207358:207454(96) ack 212142 win 7560
>02:34:23.358474 IP (tos 0x0, ttl 128, id 49348, offset 0, flags [DF], proto 6, length: 208) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 212142:212310(168) ack 207454 win 64416
>02:34:23.360227 IP (tos 0x0, ttl  64, id 59462, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 207454:207554(100) ack 212310 win 7560
>02:34:23.361656 IP (tos 0x0, ttl 128, id 49349, offset 0, flags [DF], proto 6, length: 208) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 212310:212478(168) ack 207554 win 64316
>02:34:23.363566 IP (tos 0x0, ttl  64, id 59463, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 207554:207654(100) ack 212478 win 7560
>02:34:23.364819 IP (tos 0x0, ttl 128, id 49350, offset 0, flags [DF], proto 6, length: 208) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 212478:212646(168) ack 207654 win 64216
>02:34:23.366619 IP (tos 0x0, ttl  64, id 59464, offset 0, flags [DF], proto 6, length: 1088) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 207654:208702(1048) ack 212646 win 7560
>02:34:23.371639 IP (tos 0x0, ttl 128, id 49351, offset 0, flags [DF], proto 6, length: 192) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 212646:212798(152) ack 208702 win 64512
>02:34:23.373693 IP (tos 0x0, ttl  64, id 59465, offset 0, flags [DF], proto 6, length: 140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 208702:208802(100) ack 212798 win 7560
>02:34:23.375775 IP (tos 0x0, ttl 128, id 49352, offset 0, flags [DF], proto 6, length: 1188) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 212798:213946(1148) ack 208802 win 64412
>02:34:23.381343 IP (tos 0x0, ttl  64, id 59466, offset 0, flags [DF], proto 6, length: 1140) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 208802:209902(1100) ack 213946 win 7560
>02:34:23.387914 IP (tos 0x0, ttl 128, id 49353, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 213946:215206(1260) ack 209902 win 63312
>02:34:23.387918 IP (tos 0x0, ttl 128, id 49354, offset 0, flags [DF], proto 6, length: 384) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 215206:215550(344) ack 209902 win 63312
>02:34:23.388225 IP (tos 0x0, ttl  64, id 59467, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 209902:209902(0) ack 215550 win 7560
>02:34:23.391972 IP (tos 0x0, ttl  64, id 59468, offset 0, flags [DF], proto 6, length: 1300) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: . [tcp sum ok] 209902:211162(1260) ack 215550 win 7560
>02:34:23.392360 IP (tos 0x0, ttl  64, id 59469, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 211162:211458(296) ack 215550 win 7560
>02:34:23.392461 IP (tos 0x0, ttl 128, id 49355, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 215550:215550(0) ack 211458 win 64512
>02:34:23.407519 IP (tos 0x0, ttl 128, id 49356, offset 0, flags [DF], proto 6, length: 184) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 215550:215694(144) ack 211458 win 64512
>02:34:23.410768 IP (tos 0x0, ttl  64, id 59470, offset 0, flags [DF], proto 6, length: 136) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 211458:211554(96) ack 215694 win 7560
>02:34:23.413991 IP (tos 0x0, ttl 128, id 49357, offset 0, flags [DF], proto 6, length: 200) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 215694:215854(160) ack 211554 win 64416
>02:34:23.416567 IP (tos 0x0, ttl  64, id 59471, offset 0, flags [DF], proto 6, length: 152) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 211554:211666(112) ack 215854 win 7560
>02:34:23.421654 IP (tos 0x0, ttl 128, id 49358, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 215854:216134(280) ack 211666 win 64304
>02:34:23.425534 IP (tos 0x0, ttl  64, id 59472, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 211666:211774(108) ack 216134 win 7560
>02:34:23.429648 IP (tos 0x0, ttl 128, id 49359, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 216134:216414(280) ack 211774 win 64196
>02:34:23.433309 IP (tos 0x0, ttl  64, id 59473, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 211774:211882(108) ack 216414 win 7560
>02:34:23.436911 IP (tos 0x0, ttl 128, id 49360, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 216414:216546(132) ack 211882 win 64088
>02:34:23.436915 IP (tos 0x0, ttl 128, id 49361, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 216546:216678(132) ack 211882 win 64088
>02:34:23.439116 IP (tos 0x0, ttl  64, id 59474, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 211882:211990(108) ack 216678 win 7560
>02:34:23.439874 IP (tos 0x0, ttl 128, id 49362, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 216678:216810(132) ack 211990 win 63980
>02:34:23.441594 IP (tos 0x0, ttl  64, id 59475, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 211990:212098(108) ack 216810 win 7560
>02:34:23.443159 IP (tos 0x0, ttl  64, id 59476, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212098:212206(108) ack 216810 win 7560
>02:34:23.443342 IP (tos 0x0, ttl 128, id 49363, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 216810:216810(0) ack 212206 win 63764
>02:34:23.489328 IP (tos 0x0, ttl 128, id 49364, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:23.499682 IP (tos 0x0, ttl  64, id 34879, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2162: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:23.499908 IP (tos 0x0, ttl 128, id 49365, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2162 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:23.504529 IP (tos 0x0, ttl 128, id 49366, offset 0, flags [DF], proto 6, length: 48) 192.168.1.20.2163 > 192.168.1.28.microsoft-ds: S [tcp sum ok] 2062258412:2062258412(0) win 64512 <mss 1260,nop,nop,sackOK>
>02:34:23.504610 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.microsoft-ds > 192.168.1.20.2163: S [tcp sum ok] 2805551313:2805551313(0) ack 2062258413 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:23.504735 IP (tos 0x0, ttl 128, id 49367, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2163 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 1:1(0) ack 1 win 64512
>02:34:23.548967 IP (tos 0x0, ttl 128, id 49368, offset 0, flags [DF], proto 6, length: 177) 192.168.1.20.2163 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 1:138(137) ack 1 win 64512
>02:34:23.548972 IP (tos 0x0, ttl  64, id 14758, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2163: . [tcp sum ok] 1:1(0) ack 138 win 5840
>02:34:24.219393 IP (tos 0x0, ttl 128, id 49374, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 216810:216942(132) ack 212206 win 63764
>02:34:24.222165 IP (tos 0x0, ttl  64, id 59477, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212206:212314(108) ack 216942 win 7560
>02:34:24.335900 IP (tos 0x0, ttl  64, id 14759, offset 0, flags [DF], proto 6, length: 171) 192.168.1.28.microsoft-ds > 192.168.1.20.2163: P [tcp sum ok] 1:132(131) ack 138 win 5840
>02:34:24.338370 IP (tos 0x0, ttl 128, id 49375, offset 0, flags [DF], proto 6, length: 288) 192.168.1.20.2163 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 138:386(248) ack 132 win 64381
>02:34:24.338465 IP (tos 0x0, ttl  64, id 14760, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2163: . [tcp sum ok] 132:132(0) ack 386 win 5840
>02:34:24.345975 IP (tos 0x0, ttl  64, id 14761, offset 0, flags [DF], proto 6, length: 336) 192.168.1.28.microsoft-ds > 192.168.1.20.2163: P [tcp sum ok] 132:428(296) ack 386 win 5840
>02:34:24.348469 IP (tos 0x0, ttl 128, id 49376, offset 0, flags [DF], proto 6, length: 392) 192.168.1.20.2163 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 386:738(352) ack 428 win 64085
>02:34:24.356898 IP (tos 0x0, ttl  64, id 14762, offset 0, flags [DF], proto 6, length: 166) 192.168.1.28.microsoft-ds > 192.168.1.20.2163: P [tcp sum ok] 428:554(126) ack 738 win 5840
>02:34:24.362013 IP (tos 0x0, ttl 128, id 49377, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2163 > 192.168.1.28.microsoft-ds: F [tcp sum ok] 738:738(0) ack 554 win 63959
>02:34:24.365212 IP (tos 0x0, ttl 128, id 49378, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 216942:217222(280) ack 212314 win 63656
>02:34:24.368525 IP (tos 0x0, ttl  64, id 59478, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212314:212422(108) ack 217222 win 7560
>02:34:24.377828 IP (tos 0x0, ttl  64, id 14763, offset 0, flags [DF], proto 6, length: 40) 192.168.1.28.microsoft-ds > 192.168.1.20.2163: F [tcp sum ok] 554:554(0) ack 739 win 5840
>02:34:24.378736 IP (tos 0x0, ttl 128, id 49379, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2163 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 739:739(0) ack 555 win 63959
>02:34:24.382572 IP (tos 0x0, ttl 128, id 49380, offset 0, flags [DF], proto 6, length: 320) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 217222:217502(280) ack 212422 win 63548
>02:34:24.387093 IP (tos 0x0, ttl  64, id 59479, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212422:212530(108) ack 217502 win 7560
>02:34:24.389560 IP (tos 0x0, ttl 128, id 49381, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 217502:217634(132) ack 212530 win 63440
>02:34:24.391594 IP (tos 0x0, ttl  64, id 59480, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212530:212638(108) ack 217634 win 7560
>02:34:24.393706 IP (tos 0x0, ttl 128, id 49382, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 217634:217766(132) ack 212638 win 63332
>02:34:24.395506 IP (tos 0x0, ttl  64, id 59481, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212638:212746(108) ack 217766 win 7560
>02:34:24.398262 IP (tos 0x0, ttl 128, id 49383, offset 0, flags [DF], proto 6, length: 172) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 217766:217898(132) ack 212746 win 64512
>02:34:24.400336 IP (tos 0x0, ttl  64, id 59482, offset 0, flags [DF], proto 6, length: 148) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212746:212854(108) ack 217898 win 7560
>02:34:24.404015 IP (tos 0x0, ttl 128, id 49384, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 217898:217943(45) ack 212854 win 64404
>02:34:24.406241 IP (tos 0x0, ttl  64, id 59483, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212854:212893(39) ack 217943 win 7560
>02:34:24.408993 IP (tos 0x0, ttl 128, id 49385, offset 0, flags [DF], proto 6, length: 85) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: P [tcp sum ok] 217943:217988(45) ack 212893 win 64365
>02:34:24.410631 IP (tos 0x0, ttl  64, id 59484, offset 0, flags [DF], proto 6, length: 79) 192.168.1.28.microsoft-ds > 192.168.1.20.2149: P [tcp sum ok] 212893:212932(39) ack 217988 win 7560
>02:34:24.430449 IP (tos 0x0, ttl 128, id 49386, offset 0, flags [DF], proto 6, length: 40) 192.168.1.20.2149 > 192.168.1.28.microsoft-ds: . [tcp sum ok] 217988:217988(0) ack 212932 win 64326
>02:34:26.880337 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.242.1.2152: S [tcp sum ok] 2786416580:2786416580(0) ack 2057386653 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:27.281987 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 192.168.233.1.2153: S [tcp sum ok] 2785724549:2785724549(0) ack 2057461852 win 5840 <mss 1460,nop,nop,sackOK>
>02:34:27.481985 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 48) 192.168.1.28.netbios-ssn > 9.145.199.30.ninstall: S [tcp sum ok] 2793311935:2793311935(0) ack 2057293355 win 5840 <mss 1460,nop,nop,sackOK>
>
>1107 packets captured
>1107 packets received by filter
>0 packets dropped by kernel

Actions: View

Attachments on bug 1519: 561 | 569 | 685 | 724 | 725 | 733 | 734