No. Time Source Destination Protocol Info 1 0.000000 10.0.0.0 224.0.0.1 IGMP V3 Membership Query, general Frame 1: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 10.0.0.0 (10.0.0.0), Dst: 224.0.0.1 (224.0.0.1) Internet Group Management Protocol No. Time Source Destination Protocol Info 2 0.045112 193.162.0.193 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 2: 46 bytes on wire (368 bits), 46 bytes captured (368 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 239.255.255.250 (239.255.255.250) Internet Group Management Protocol No. Time Source Destination Protocol Info 3 0.212773 Ibm_53:4d:08 Broadcast ARP Who has 193.162.0.7? Tell 193.162.0.253 Frame 3: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Ibm_53:4d:08 (00:21:5e:53:4d:08), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 4 2.439176 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 4: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 1, Ack: 1, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 5 2.439566 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 5: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 1, Ack: 119, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 6 2.439695 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 6: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 119, Ack: 105, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 7 2.439981 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 7: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 105, Ack: 193, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 8 2.560724 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=193 Ack=185 Win=64477 Len=0 Frame 8: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 193, Ack: 185, Len: 0 No. Time Source Destination Protocol Info 9 2.908422 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 9: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 10 3.252896 193.162.0.141 193.162.0.255 NBNS Name query NB WORKGROUP<1d> Frame 10: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 58215 (58215), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 11 3.728103 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 11: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 193, Ack: 185, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 12 3.728486 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 12: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 185, Ack: 311, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 13 3.728618 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 13: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 311, Ack: 289, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 14 3.728897 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 14: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 289, Ack: 385, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 15 3.729135 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f74, Path: \193.162.0.197\data\New Text Document.txt Frame 15: 226 bytes on wire (1808 bits), 226 bytes captured (1808 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 385, Ack: 369, Len: 172 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 16 3.729892 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f74 Frame 16: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 369, Ack: 557, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 17 3.729923 193.162.0.197 193.162.0.193 SMB NT Trans Response, Frame 17: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 508, Ack: 557, Len: 75 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 18 3.729952 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=557 Ack=583 Win=64079 Len=0 Frame 18: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 557, Ack: 583, Len: 0 No. Time Source Destination Protocol Info 19 3.730020 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x2f74, Query File Internal Info Frame 19: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 557, Ack: 583, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 20 3.730117 193.162.0.193 193.162.0.197 SMB NT Trans Request, NT NOTIFY, FID: 0x2f53 Frame 20: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 633, Ack: 583, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 21 3.730234 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=583 Ack=721 Win=65535 Len=0 Frame 21: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 583, Ack: 721, Len: 0 No. Time Source Destination Protocol Info 22 3.730309 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f74, QUERY_FILE_INFO Frame 22: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 583, Ack: 721, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 23 3.730863 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Query FS Volume Info Frame 23: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 721, Ack: 655, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 24 3.731144 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 24: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 655, Ack: 795, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 25 3.731229 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x2f74, Query File Basic Info Frame 25: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 795, Ack: 741, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 26 3.731433 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f74, QUERY_FILE_INFO Frame 26: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 741, Ack: 871, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 27 3.731850 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 27: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 871, Ack: 845, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 28 3.732216 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 28: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 845, Ack: 989, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 29 3.732359 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\New Text Document.txt Frame 29: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 989, Ack: 949, Len: 168 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 30 3.732923 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 30: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 949, Ack: 1157, Len: 208 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 31 3.733449 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 31: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 1157, Ack: 1157, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 32 3.733819 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 32: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 1157, Ack: 1275, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 33 3.734081 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\New Text Document.txt Frame 33: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 1275, Ack: 1261, Len: 168 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 34 3.734572 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 34: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 1261, Ack: 1443, Len: 208 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 35 3.735148 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 35: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 1443, Ack: 1469, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 36 3.735472 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 36: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 1469, Ack: 1561, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 37 3.735620 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\New Text Document.txt Frame 37: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 1561, Ack: 1573, Len: 168 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 38 3.736096 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 38: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 1573, Ack: 1729, Len: 208 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 39 3.736725 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 39: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 1729, Ack: 1781, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 40 3.737101 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 40: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 1781, Ack: 1847, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 41 3.737244 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\New Text Document.txt Frame 41: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 1847, Ack: 1885, Len: 168 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 42 3.737726 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 42: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 1885, Ack: 2015, Len: 208 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 43 3.737963 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\New Text Document.txt Frame 43: 216 bytes on wire (1728 bits), 216 bytes captured (1728 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2015, Ack: 2093, Len: 162 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 44 3.738308 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 44: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2093, Ack: 2177, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 45 3.738427 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\New Text Document.txt Frame 45: 216 bytes on wire (1728 bits), 216 bytes captured (1728 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2177, Ack: 2197, Len: 162 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 46 3.738857 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 46: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2197, Ack: 2339, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 47 3.744451 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f74 Frame 47: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2339, Ack: 2301, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 48 3.744768 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f74 Frame 48: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2301, Ack: 2384, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 49 3.873211 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=2384 Ack=2340 Win=65392 Len=0 Frame 49: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2384, Ack: 2340, Len: 0 No. Time Source Destination Protocol Info 50 3.972954 193.162.0.141 193.162.0.255 NBNS Name query NB MISU<00> Frame 50: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 50298 (50298), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 51 3.972964 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.141? Tell 193.162.0.31 Frame 51: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 52 3.984160 193.162.0.141 193.162.0.255 NBNS Name query NB DIANA<00> Frame 52: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 60293 (60293), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 53 3.984301 SunrichT_15:73:e1 Broadcast ARP Who has 193.162.0.141? Tell 193.162.0.161 Frame 53: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_15:73:e1 (00:0a:cd:15:73:e1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 54 3.984950 193.162.0.141 193.162.0.255 NBNS Name query NB SERVERINTERNET<00> Frame 54: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 51663 (51663), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 55 4.010004 193.162.0.141 193.162.0.255 NBNS Name query NB BMX-20E139E6C6B<00> Frame 55: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 62082 (62082), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 56 4.068971 Azurewav_1a:cf:99 Broadcast ARP Who has 193.162.0.141? Tell 193.162.0.86 Frame 56: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Azurewav_1a:cf:99 (00:22:43:1a:cf:99), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 57 4.270051 193.162.0.141 255.255.255.255 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 57: 170 bytes on wire (1360 bits), 170 bytes captured (1360 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time Source Destination Protocol Info 58 4.270529 193.162.0.141 193.162.0.255 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 58: 170 bytes on wire (1360 bits), 170 bytes captured (1360 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time Source Destination Protocol Info 59 4.520353 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 59: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 60 4.723091 MS-NLB-PhysServer-01_00:00:00:00 Broadcast MS NLB MS NLB heartbeat Frame 60: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: MS-NLB-PhysServer-01_00:00:00:00 (02:01:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff) MS Network Load Balancing No. Time Source Destination Protocol Info 61 4.835490 HonHaiPr_b4:d1:46 Broadcast ARP Who has 193.162.0.208? Tell 193.162.0.164 Frame 61: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_b4:d1:46 (00:1c:25:b4:d1:46), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 62 5.026085 193.162.0.143 193.162.0.255 NBNS Name query NB SERVERINTERNET<20> Frame 62: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 63 5.088090 193.162.0.143 193.162.0.255 NBNS Name query NB ANCA<20> Frame 63: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 64 5.089368 LiteonTe_68:cf:60 Broadcast ARP Who has 193.162.0.41? Tell 193.162.0.143 Frame 64: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 65 5.091207 193.162.0.143 193.162.0.255 NBNS Name query NB ANCA<00> Frame 65: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 66 5.157459 193.162.0.143 193.162.0.255 NBNS Name query NB BANOV3<20> Frame 66: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 67 5.157680 193.162.0.143 193.162.0.255 NBNS Name query NB BANOV3<00> Frame 67: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 68 5.158215 Dell_86:9d:11 Broadcast ARP Who has 193.162.0.143? Tell 193.162.0.127 Frame 68: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_86:9d:11 (00:15:c5:86:9d:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 69 5.330081 193.162.0.251 193.162.0.255 BROWSER Host Announcement TERMINALSERV2, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server, Unknown server type:25 Frame 69: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Trendnet_14:71:e6 (00:14:d1:14:71:e6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.251 (193.162.0.251), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 70 5.330191 89.121.33.123 89.121.33.255 BROWSER Local Master Announcement TERMINALSERV2, Workstation, Server, NT Workstation, NT Server, Master Browser, DFS server, Unknown server type:25 Frame 70: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SweexEur_12:60:35 (00:16:0a:12:60:35), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 89.121.33.123 (89.121.33.123), Dst: 89.121.33.255 (89.121.33.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 71 5.907048 193.162.0.143 193.162.0.255 NBNS Name query NB BANOV3<20> Frame 71: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 72 5.939967 193.162.0.143 193.162.0.255 NBNS Name query NB BANOV3<00> Frame 72: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 73 6.017649 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 73: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 74 6.758962 193.162.0.143 193.162.0.255 NBNS Name query NB BANOV3<20> Frame 74: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 75 6.759171 193.162.0.143 193.162.0.255 NBNS Name query NB BANOV3<00> Frame 75: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 76 6.759667 Dell_86:9d:11 Broadcast ARP Who has 193.162.0.143? Tell 193.162.0.127 Frame 76: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_86:9d:11 (00:15:c5:86:9d:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 77 6.790673 193.162.0.143 193.162.0.255 NBNS Name query NB DATE<00> Frame 77: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 78 6.790962 193.162.0.143 193.162.0.255 NBNS Name query NB DATE<20> Frame 78: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 79 6.792706 LiteonTe_68:cf:60 Broadcast ARP Who has 193.162.0.197? Tell 193.162.0.143 Frame 79: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 80 7.000215 10.0.0.0 224.0.0.1 IGMP V3 Membership Query, general Frame 80: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 10.0.0.0 (10.0.0.0), Dst: 224.0.0.1 (224.0.0.1) Internet Group Management Protocol No. Time Source Destination Protocol Info 81 7.045099 193.162.0.193 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 81: 46 bytes on wire (368 bits), 46 bytes captured (368 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 239.255.255.250 (239.255.255.250) Internet Group Management Protocol No. Time Source Destination Protocol Info 82 7.392656 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 82: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 83 7.425898 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 83: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2384, Ack: 2340, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 84 7.426318 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 84: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2340, Ack: 2502, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 85 7.426446 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 85: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2502, Ack: 2444, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 86 7.426726 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 86: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2444, Ack: 2576, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 87 7.426988 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 87: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2576, Ack: 2524, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 88 7.427349 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 88: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2524, Ack: 2694, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 89 7.427575 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\New Text Document.txt Frame 89: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2694, Ack: 2628, Len: 168 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 90 7.428042 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 90: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2628, Ack: 2862, Len: 208 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 91 7.428287 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 91: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2862, Ack: 2836, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 92 7.428576 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 92: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2836, Ack: 2980, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 93 7.428693 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 93: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 2980, Ack: 2940, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 94 7.428982 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 94: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 2940, Ack: 3054, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 95 7.429224 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f75, Path: \193.162.0.197\data\New Text Document.txt Frame 95: 226 bytes on wire (1808 bits), 226 bytes captured (1808 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3054, Ack: 3020, Len: 172 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 96 7.429743 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f75 Frame 96: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3020, Ack: 3226, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 97 7.429886 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x2f75, Query File Basic Info Frame 97: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3226, Ack: 3159, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 98 7.430186 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f75, QUERY_FILE_INFO Frame 98: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3159, Ack: 3302, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 99 7.430384 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f75 Frame 99: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3302, Ack: 3263, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 100 7.430667 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f75 Frame 100: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3263, Ack: 3347, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 101 7.430752 193.162.0.193 193.162.0.197 SMB Rename Request, Old Name: \193.162.0.197\data\New Text Document.txt, New Name: \193.162.0.197\data\test file.txt Frame 101: 250 bytes on wire (2000 bits), 250 bytes captured (2000 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3347, Ack: 3302, Len: 196 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 102 7.431853 193.162.0.197 193.162.0.193 SMB Rename Response Frame 102: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3302, Ack: 3543, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 103 7.431918 193.162.0.197 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 103: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3341, Ack: 3543, Len: 75 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 104 7.431975 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=3543 Ack=3416 Win=64316 Len=0 Frame 104: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3543, Ack: 3416, Len: 0 No. Time Source Destination Protocol Info 105 7.432695 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 105: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3543, Ack: 3416, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 106 7.433068 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 106: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3416, Ack: 3661, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 107 7.433164 193.162.0.193 193.162.0.197 SMB NT Trans Request, NT NOTIFY, FID: 0x2f53 Frame 107: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3661, Ack: 3520, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 108 7.433256 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 108: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3749, Ack: 3520, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 109 7.433363 193.162.0.197 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 109: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3520, Ack: 3749, Len: 75 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 110 7.433502 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 110: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3595, Ack: 3867, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 111 7.433558 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=3867 Ack=3699 Win=65535 Len=0 Frame 111: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3867, Ack: 3699, Len: 0 No. Time Source Destination Protocol Info 112 7.433683 193.162.0.193 193.162.0.197 SMB NT Trans Request, NT NOTIFY, FID: 0x2f53 Frame 112: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3867, Ack: 3699, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 113 7.433913 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 113: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 3955, Ack: 3699, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 114 7.434043 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=3699 Ack=4073 Win=65535 Len=0 Frame 114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3699, Ack: 4073, Len: 0 No. Time Source Destination Protocol Info 115 7.434309 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 115: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3699, Ack: 4073, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 116 7.434444 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\test file.txt Frame 116: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4073, Ack: 3803, Len: 152 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 117 7.434992 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test file.txt Frame 117: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3803, Ack: 4225, Len: 192 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 118 7.435667 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 118: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4225, Ack: 3995, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 119 7.435947 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 119: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 3995, Ack: 4343, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 120 7.436088 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\* Frame 120: 182 bytes on wire (1456 bits), 182 bytes captured (1456 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4343, Ack: 4099, Len: 128 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 121 7.436716 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: . .. _68A5Z~Z.TXT test file.txt Frame 121: 562 bytes on wire (4496 bits), 562 bytes captured (4496 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 4099, Ack: 4471, Len: 508 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 122 7.440446 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 122: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4471, Ack: 4607, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 123 7.440699 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 123: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 4607, Ack: 4589, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 124 7.440816 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 124: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4589, Ack: 4711, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 125 7.441178 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 125: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 4711, Ack: 4707, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 126 7.591959 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=4707 Ack=4815 Win=64419 Len=0 Frame 126: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4707, Ack: 4815, Len: 0 No. Time Source Destination Protocol Info 127 9.019017 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 128 9.279539 193.162.0.35 193.162.0.255 NBNS Name query NB COMP<00> Frame 128: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: AsustekC_ca:b1:4b (00:11:2f:ca:b1:4b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.35 (193.162.0.35), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 129 9.280370 Dell_d0:48:76 Broadcast ARP Who has 193.162.0.35? Tell 193.162.0.22 Frame 129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_d0:48:76 (f0:4d:a2:d0:48:76), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 130 9.281197 193.162.0.35 193.162.0.255 NBNS Name query NB COMP<20> Frame 130: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: AsustekC_ca:b1:4b (00:11:2f:ca:b1:4b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.35 (193.162.0.35), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 131 9.538895 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 131: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4707, Ack: 4815, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 132 9.539234 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 132: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 4815, Ack: 4825, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 133 9.539365 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 133: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4825, Ack: 4919, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 134 9.539728 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 134: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 4919, Ack: 4943, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 135 9.576756 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 135: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 4943, Ack: 5023, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 136 9.577127 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 136: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5023, Ack: 5061, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 137 9.577339 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 137: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5061, Ack: 5127, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 138 9.577732 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 138: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5127, Ack: 5179, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 139 9.581604 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 139: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5179, Ack: 5231, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 140 9.582105 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 140: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5231, Ack: 5325, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 141 9.582312 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 141: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5325, Ack: 5335, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 142 9.582773 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 142: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5335, Ack: 5471, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 143 9.583113 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 143: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5471, Ack: 5439, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 144 9.583471 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 144: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5439, Ack: 5617, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 145 9.583590 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 145: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5617, Ack: 5543, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 146 9.583990 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 146: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5543, Ack: 5763, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 147 9.602376 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 147: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5763, Ack: 5647, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 148 9.602776 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 148: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5647, Ack: 5881, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 149 9.602936 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 149: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5881, Ack: 5751, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 150 9.603292 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 150: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5751, Ack: 5999, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 151 9.604049 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 151: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 5999, Ack: 5855, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 152 9.604389 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 152: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5855, Ack: 6145, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 153 9.604522 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 153: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 6145, Ack: 5959, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 154 9.604918 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 154: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 5959, Ack: 6291, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 155 9.604992 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Standard Info, Path: \193.162.0.197\data\test file.txt Frame 155: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 6291, Ack: 6063, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 156 9.605414 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 156: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6063, Ack: 6437, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 157 9.605487 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \193.162.0.197\data\test file.txt Frame 157: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 6437, Ack: 6151, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 158 9.605921 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 158: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6151, Ack: 6583, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 159 9.606005 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File EA Info, Path: \193.162.0.197\data\test file.txt Frame 159: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 6583, Ack: 6223, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 160 9.606422 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 160: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6223, Ack: 6729, Len: 68 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 161 9.606527 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f77, Path: \193.162.0.197\data\test file.txt Frame 161: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 6729, Ack: 6291, Len: 156 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 162 9.607085 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f77 Frame 162: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6291, Ack: 6885, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 163 9.607210 193.162.0.193 193.162.0.197 SMB NT Trans Request, NT IOCTL FILE_SYSTEM Function:0x0030, FID: 0x2f77 Frame 163: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 6885, Ack: 6430, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 164 9.607458 193.162.0.197 193.162.0.193 SMB NT Trans Response, FID: 0x2f77, NT IOCTL Frame 164: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6430, Ack: 6973, Len: 142 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 165 9.607568 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Object ID Information Frame 165: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 6973, Ack: 6572, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 166 9.607883 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 166: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6572, Ack: 7047, Len: 124 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 167 9.608079 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 167: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7047, Ack: 6696, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 168 9.608434 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 168: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6696, Ack: 7165, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 169 9.608676 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 169: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7165, Ack: 6800, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 170 9.609018 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 170: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6800, Ack: 7283, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 171 9.609366 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f77 Frame 171: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7283, Ack: 6904, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 172 9.609556 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f77 Frame 172: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6904, Ack: 7328, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 173 9.613947 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 173: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7328, Ack: 6943, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 174 9.614320 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 174: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 6943, Ack: 7446, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 175 9.645632 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 175: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7446, Ack: 7047, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 176 9.646048 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 176: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7047, Ack: 7564, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 177 9.646191 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 177: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7564, Ack: 7151, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 178 9.646997 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 178: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7151, Ack: 7682, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 179 9.647618 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 179: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7682, Ack: 7255, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 180 9.648557 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 180: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7255, Ack: 7800, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 181 9.648722 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 181: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7800, Ack: 7359, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 182 9.648969 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 182: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7359, Ack: 7918, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 183 9.649057 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Standard Info, Path: \193.162.0.197\data Frame 183: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 7918, Ack: 7463, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 184 9.649433 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 184: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7463, Ack: 8036, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 185 9.651917 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \193.162.0.197\data Frame 185: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8036, Ack: 7551, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 186 9.652267 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 186: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7551, Ack: 8154, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 187 9.652363 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File EA Info, Path: \193.162.0.197\data Frame 187: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8154, Ack: 7623, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 188 9.652715 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 188: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7623, Ack: 8272, Len: 68 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 189 9.652818 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f79, Path: \193.162.0.197\data Frame 189: 182 bytes on wire (1456 bits), 182 bytes captured (1456 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8272, Ack: 7691, Len: 128 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 190 9.653327 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f79 Frame 190: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7691, Ack: 8400, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 191 9.655487 193.162.0.193 193.162.0.197 SMB NT Trans Request, NT IOCTL FILE_SYSTEM Function:0x0030, FID: 0x2f79 Frame 191: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8400, Ack: 7830, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 192 9.655724 193.162.0.197 193.162.0.193 SMB NT Trans Response, FID: 0x2f79, NT IOCTL Frame 192: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7830, Ack: 8488, Len: 142 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 193 9.655811 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Object ID Information Frame 193: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8488, Ack: 7972, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 194 9.656097 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 194: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 7972, Ack: 8562, Len: 124 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 195 9.658563 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f79 Frame 195: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8562, Ack: 8096, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 196 9.658811 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f79 Frame 196: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8096, Ack: 8607, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 197 9.667620 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 197: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8607, Ack: 8135, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 198 9.668024 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 198: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8135, Ack: 8725, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 199 9.668163 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 199: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8725, Ack: 8239, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 200 9.668526 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 200: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8239, Ack: 8843, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 201 9.668655 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\test file.txt Frame 201: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8843, Ack: 8343, Len: 152 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 202 9.669177 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test file.txt Frame 202: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8343, Ack: 8995, Len: 192 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 203 9.669298 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 203: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 8995, Ack: 8535, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 204 9.669654 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 204: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8535, Ack: 9113, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 205 9.669847 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f7a, Path: \193.162.0.197\data\test file.txt Frame 205: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9113, Ack: 8639, Len: 156 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 206 9.670330 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f7a Frame 206: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8639, Ack: 9269, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 207 9.670479 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x2f7a, Query File Basic Info Frame 207: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9269, Ack: 8778, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 208 9.670545 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 208: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9345, Ack: 8778, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 209 9.670656 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=8778 Ack=9463 Win=65535 Len=0 Frame 209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8778, Ack: 9463, Len: 0 No. Time Source Destination Protocol Info 210 9.670785 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f7a, QUERY_FILE_INFO Frame 210: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8778, Ack: 9463, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 211 9.670900 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 211: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8882, Ack: 9463, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 212 9.670959 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=9463 Ack=8986 Win=64788 Len=0 Frame 212: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9463, Ack: 8986, Len: 0 No. Time Source Destination Protocol Info 213 9.671280 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 213: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9463, Ack: 8986, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 214 9.671406 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 214: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9609, Ack: 8986, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 215 9.671517 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=8986 Ack=9727 Win=65535 Len=0 Frame 215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8986, Ack: 9727, Len: 0 No. Time Source Destination Protocol Info 216 9.671747 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 216: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 8986, Ack: 9727, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 217 9.671863 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 217: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9090, Ack: 9727, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 218 9.671889 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 218: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9727, Ack: 9090, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 219 9.671976 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Standard Info, Path: \193.162.0.197\data Frame 219: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9873, Ack: 9194, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 220 9.672085 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=9194 Ack=9991 Win=65535 Len=0 Frame 220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9194, Ack: 9991, Len: 0 No. Time Source Destination Protocol Info 221 9.672366 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 221: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9194, Ack: 9991, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 222 9.672433 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 222: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9298, Ack: 9991, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 223 9.672464 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=9991 Ack=9386 Win=64388 Len=0 Frame 223: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9991, Ack: 9386, Len: 0 No. Time Source Destination Protocol Info 224 9.672618 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File EA Info, Path: \193.162.0.197\data Frame 224: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 9991, Ack: 9386, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 225 9.672960 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 225: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9386, Ack: 10109, Len: 68 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 226 9.673068 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 226: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10109, Ack: 9454, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 227 9.673421 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 227: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9454, Ack: 10227, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 228 9.673530 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f7c, Path: \193.162.0.197\data Frame 228: 182 bytes on wire (1456 bits), 182 bytes captured (1456 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10227, Ack: 9558, Len: 128 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 229 9.673634 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\test file.txt Frame 229: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10355, Ack: 9558, Len: 152 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 230 9.673766 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=9558 Ack=10507 Win=65535 Len=0 Frame 230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9558, Ack: 10507, Len: 0 No. Time Source Destination Protocol Info 231 9.674027 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f7c Frame 231: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9558, Ack: 10507, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 232 9.674240 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test file.txt Frame 232: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9697, Ack: 10507, Len: 192 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 233 9.674268 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=10507 Ack=9889 Win=65535 Len=0 Frame 233: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10507, Ack: 9889, Len: 0 No. Time Source Destination Protocol Info 234 9.674357 193.162.0.193 193.162.0.197 SMB NT Trans Request, NT IOCTL FILE_SYSTEM Function:0x0030, FID: 0x2f7c Frame 234: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10507, Ack: 9889, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 235 9.674585 193.162.0.197 193.162.0.193 SMB NT Trans Response, FID: 0x2f7c, NT IOCTL Frame 235: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 9889, Ack: 10595, Len: 142 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 236 9.674667 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Object ID Information Frame 236: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10595, Ack: 10031, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 237 9.674960 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 237: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10031, Ack: 10669, Len: 124 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 238 9.676862 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f7c Frame 238: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10669, Ack: 10155, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 239 9.677111 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f7c Frame 239: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10155, Ack: 10714, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 240 9.777608 193.162.0.118 193.162.0.255 BROWSER Host Announcement SORINEL, Workstation, Server, NT Workstation, Potential Browser Frame 240: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: AsrockIn_86:63:d4 (00:25:22:86:63:d4), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.118 (193.162.0.118), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 241 9.888866 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=10714 Ack=10194 Win=65230 Len=0 Frame 241: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10714, Ack: 10194, Len: 0 No. Time Source Destination Protocol Info 242 12.395626 193.162.0.254 193.162.0.255 NBNS Name query NB WPAD<00> Frame 242: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 243 13.144844 193.162.0.254 193.162.0.255 NBNS Name query NB WPAD<00> Frame 243: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 244 13.408021 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 245 13.668034 Dell_d0:48:76 Broadcast ARP Who has 193.162.0.81? Tell 193.162.0.22 Frame 245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_d0:48:76 (f0:4d:a2:d0:48:76), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 246 13.894982 193.162.0.254 193.162.0.255 NBNS Name query NB WPAD<00> Frame 246: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 247 14.077836 IntelCor_2f:0e:e6 Broadcast ARP Who has 193.162.0.254? Tell 193.162.0.222 Frame 247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_2f:0e:e6 (00:21:5d:2f:0e:e6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 248 14.722860 MS-NLB-PhysServer-01_00:00:00:00 Broadcast MS NLB MS NLB heartbeat Frame 248: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: MS-NLB-PhysServer-01_00:00:00:00 (02:01:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff) MS Network Load Balancing No. Time Source Destination Protocol Info 249 15.076465 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f7a Frame 249: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10714, Ack: 10194, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 250 15.076819 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f7a Frame 250: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10194, Ack: 10759, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 251 15.248239 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=10759 Ack=10233 Win=65191 Len=0 Frame 251: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10759, Ack: 10233, Len: 0 No. Time Source Destination Protocol Info 252 16.295407 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f7d, Path: \193.162.0.197\data\test file.txt Frame 252: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10759, Ack: 10233, Len: 156 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 253 16.296004 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f7d Frame 253: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10233, Ack: 10915, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 254 16.296168 193.162.0.193 193.162.0.197 SMB Write Request, FID: 0x2f7d, 0 bytes at offset 68 Frame 254: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10915, Ack: 10372, Len: 52 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 255 16.297820 193.162.0.197 193.162.0.193 SMB Write Response, FID: 0x2f7d, 0 bytes Frame 255: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10372, Ack: 10967, Len: 41 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 256 16.297976 193.162.0.193 193.162.0.197 SMB Trans2 Request, SET_FILE_INFO, FID: 0x2f7d Frame 256: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 10967, Ack: 10413, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 257 16.298008 193.162.0.197 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 257: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10413, Ack: 10967, Len: 75 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 258 16.298124 193.162.0.193 193.162.0.197 SMB NT Trans Request, NT NOTIFY, FID: 0x2f53 Frame 258: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11055, Ack: 10488, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 259 16.298244 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=10488 Ack=11143 Win=65535 Len=0 Frame 259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10488, Ack: 11143, Len: 0 No. Time Source Destination Protocol Info 260 16.298342 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f7d, SET_FILE_INFO Frame 260: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10488, Ack: 11143, Len: 62 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 261 16.298496 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 261: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11143, Ack: 10550, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 262 16.298967 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 262: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10550, Ack: 11289, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 263 16.299090 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 263: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11289, Ack: 10654, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 264 16.299507 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 264: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10654, Ack: 11435, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 265 16.299642 193.162.0.193 193.162.0.197 SMB Write AndX Request, FID: 0x2f7d, 68 bytes at offset 0 Frame 265: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11435, Ack: 10758, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 266 16.299908 193.162.0.197 193.162.0.193 SMB Write AndX Response, FID: 0x2f7d, 68 bytes Frame 266: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10758, Ack: 11571, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 267 16.300113 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 267: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11571, Ack: 10809, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 268 16.300487 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 268: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10809, Ack: 11689, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 269 16.300632 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\test file.txt Frame 269: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11689, Ack: 10913, Len: 152 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 270 16.301155 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test file.txt Frame 270: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 10913, Ack: 11841, Len: 192 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 271 16.301559 193.162.0.193 193.162.0.197 SMB Trans2 Request, SET_FILE_INFO, FID: 0x2f7d Frame 271: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11841, Ack: 11105, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 272 16.301831 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f7d, SET_FILE_INFO Frame 272: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 11105, Ack: 11929, Len: 62 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 273 16.451361 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=11929 Ack=11167 Win=64257 Len=0 Frame 273: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11929, Ack: 11167, Len: 0 No. Time Source Destination Protocol Info 274 16.648053 193.162.0.77 224.0.0.1 IGMP V3 Membership Query, general Frame 274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco-Li_2b:50:04 (00:18:f8:2b:50:04), Dst: IPv4mcast_00:00:01 (01:00:5e:00:00:01) Internet Protocol, Src: 193.162.0.77 (193.162.0.77), Dst: 224.0.0.1 (224.0.0.1) Internet Group Management Protocol No. Time Source Destination Protocol Info 275 16.741622 193.162.0.164 193.162.0.255 BROWSER Host Announcement AGNES1, Workstation, Server, NT Workstation, Potential Browser Frame 275: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: HonHaiPr_b4:d1:46 (00:1c:25:b4:d1:46), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.164 (193.162.0.164), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 276 17.158034 193.162.0.31 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.31 (193.162.0.31), Dst: 239.255.255.250 (239.255.255.250) Internet Group Management Protocol No. Time Source Destination Protocol Info 277 17.826848 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 277: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 11929, Ack: 11167, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 278 17.827258 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 278: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 11167, Ack: 12047, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 279 17.827411 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\* Frame 279: 182 bytes on wire (1456 bits), 182 bytes captured (1456 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12047, Ack: 11271, Len: 128 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 280 17.828090 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: . .. _68A5Z~Z.TXT test file.txt Frame 280: 562 bytes on wire (4496 bits), 562 bytes captured (4496 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 11271, Ack: 12175, Len: 508 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 281 17.828832 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 281: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12175, Ack: 11779, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 282 17.829302 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 282: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 11779, Ack: 12293, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 283 17.829657 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 283: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12293, Ack: 11883, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 284 17.830036 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 284: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 11883, Ack: 12411, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 285 17.836836 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f7d Frame 285: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12411, Ack: 11987, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 286 17.837210 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f7d Frame 286: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 11987, Ack: 12456, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 287 17.892028 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 288 17.982588 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=12456 Ack=12026 Win=65288 Len=0 Frame 288: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12456, Ack: 12026, Len: 0 No. Time Source Destination Protocol Info 289 18.887870 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 289: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12456, Ack: 12026, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 290 18.888265 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 290: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12026, Ack: 12574, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 291 18.888537 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 291: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12574, Ack: 12130, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 292 18.888897 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 292: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12130, Ack: 12692, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 293 18.892350 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 293: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12692, Ack: 12234, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 294 18.892731 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 294: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12234, Ack: 12810, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 295 18.892852 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 295: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12810, Ack: 12338, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 296 18.893214 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 296: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12338, Ack: 12928, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 297 18.897423 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 297: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 12928, Ack: 12442, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 298 18.897705 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 298: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12442, Ack: 13046, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 299 18.915816 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 299: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13046, Ack: 12546, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 300 18.916216 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 300: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12546, Ack: 13164, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 301 18.916369 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\test file.txt Frame 301: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13164, Ack: 12650, Len: 152 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 302 18.916926 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test file.txt Frame 302: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12650, Ack: 13316, Len: 192 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 303 18.917226 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f7e, Path: \193.162.0.197\data\test file.txt Frame 303: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13316, Ack: 12842, Len: 156 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 304 18.917652 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f7e Frame 304: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12842, Ack: 13472, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 305 18.917732 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x2f7e, Query File Internal Info Frame 305: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13472, Ack: 12981, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 306 18.918030 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f7e, QUERY_FILE_INFO Frame 306: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 12981, Ack: 13548, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 307 18.918163 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FS_INFO, Query FS Volume Info Frame 307: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13548, Ack: 13053, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 308 18.918450 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 308: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13053, Ack: 13622, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 309 18.918536 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x2f7e, Query File Basic Info Frame 309: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13622, Ack: 13139, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 310 18.918821 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f7e, QUERY_FILE_INFO Frame 310: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13139, Ack: 13698, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 311 18.918989 193.162.0.193 193.162.0.197 SMB Read AndX Request, FID: 0x2f7e, 68 bytes at offset 0 Frame 311: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13698, Ack: 13243, Len: 63 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 312 18.919240 193.162.0.197 193.162.0.193 SMB Read AndX Response, FID: 0x2f7e, 68 bytes Frame 312: 185 bytes on wire (1480 bits), 185 bytes captured (1480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13243, Ack: 13761, Len: 131 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 313 18.919441 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 313: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13761, Ack: 13374, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 314 18.919864 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 314: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13374, Ack: 13907, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 315 18.919983 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 315: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 13907, Ack: 13478, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 316 18.920390 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 316: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13478, Ack: 14053, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 317 18.920726 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 317: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14053, Ack: 13582, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 318 18.920996 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 318: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13582, Ack: 14171, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 319 18.921244 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\test file.txt Frame 319: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14171, Ack: 13686, Len: 152 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 320 18.921676 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test file.txt Frame 320: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13686, Ack: 14323, Len: 192 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 321 19.076346 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=14323 Ack=13878 Win=64900 Len=0 Frame 321: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14323, Ack: 13878, Len: 0 No. Time Source Destination Protocol Info 322 19.519459 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 323 21.016908 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 324 21.424316 193.162.0.143 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: LiteonTe_68:cf:60 (00:22:5f:68:cf:60), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.143 (193.162.0.143), Dst: 239.255.255.250 (239.255.255.250) Internet Group Management Protocol No. Time Source Destination Protocol Info 325 22.217946 AsustekC_e3:8c:c8 Broadcast ARP Who has 193.162.0.206? Tell 193.162.0.11 Frame 325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_e3:8c:c8 (00:18:f3:e3:8c:c8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 326 22.376242 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 327 23.128378 Foxconn_d6:60:55 Broadcast ARP Who has 193.162.0.35? Tell 193.162.0.6 Frame 327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Foxconn_d6:60:55 (00:15:58:d6:60:55), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 328 23.431464 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f7e Frame 328: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14323, Ack: 13878, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 329 23.431795 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f7e Frame 329: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13878, Ack: 14368, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 330 23.431955 193.162.0.193 193.162.0.197 SMB NT Create AndX Request, FID: 0x2f7f, Path: \193.162.0.197\data\test file.txt Frame 330: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14368, Ack: 13917, Len: 156 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 331 23.432436 193.162.0.197 193.162.0.193 SMB NT Create AndX Response, FID: 0x2f7f Frame 331: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 13917, Ack: 14524, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 332 23.432742 193.162.0.193 193.162.0.197 SMB Trans2 Request, SET_FILE_INFO, FID: 0x2f7f Frame 332: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14524, Ack: 14056, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 333 23.432982 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f7f, SET_FILE_INFO Frame 333: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14056, Ack: 14612, Len: 62 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 334 23.433155 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 334: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14612, Ack: 14118, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 335 23.433563 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 335: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14118, Ack: 14758, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 336 23.433687 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data\test file.txt Frame 336: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14758, Ack: 14222, Len: 146 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 337 23.434097 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 337: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14222, Ack: 14904, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 338 23.434320 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 338: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 14904, Ack: 14326, Len: 1460 No. Time Source Destination Protocol Info 339 23.434351 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 339: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 16364, Ack: 14326, Len: 1460 No. Time Source Destination Protocol Info 340 23.434374 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 340: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 17824, Ack: 14326, Len: 1460 No. Time Source Destination Protocol Info 341 23.434397 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 341: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 19284, Ack: 14326, Len: 1460 No. Time Source Destination Protocol Info 342 23.434419 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 342: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 20744, Ack: 14326, Len: 1460 No. Time Source Destination Protocol Info 343 23.434443 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 343: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 22204, Ack: 14326, Len: 1460 No. Time Source Destination Protocol Info 344 23.434493 193.162.0.193 193.162.0.197 SMB Write AndX Request, FID: 0x2f7f, 8976 bytes at offset 0 Frame 344: 338 bytes on wire (2704 bits), 338 bytes captured (2704 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 23664, Ack: 14326, Len: 284 [Reassembled TCP Segments (9044 bytes): #338(1460), #339(1460), #340(1460), #341(1460), #342(1460), #343(1460), #344(284)] NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 345 23.434836 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=14326 Ack=17824 Win=64240 Len=0 Frame 345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14326, Ack: 17824, Len: 0 No. Time Source Destination Protocol Info 346 23.435083 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=14326 Ack=20744 Win=64240 Len=0 Frame 346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14326, Ack: 20744, Len: 0 No. Time Source Destination Protocol Info 347 23.435318 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=14326 Ack=23664 Win=64240 Len=0 Frame 347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14326, Ack: 23664, Len: 0 No. Time Source Destination Protocol Info 348 23.435453 193.162.0.197 193.162.0.193 SMB Write AndX Response, FID: 0x2f7f, 8976 bytes Frame 348: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14326, Ack: 23948, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 349 23.435567 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 349: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 23948, Ack: 14377, Len: 1460 No. Time Source Destination Protocol Info 350 23.435588 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 350: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 25408, Ack: 14377, Len: 1460 No. Time Source Destination Protocol Info 351 23.435606 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 351: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 26868, Ack: 14377, Len: 1460 No. Time Source Destination Protocol Info 352 23.435625 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 352: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 28328, Ack: 14377, Len: 1460 No. Time Source Destination Protocol Info 353 23.435644 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 353: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 29788, Ack: 14377, Len: 1460 No. Time Source Destination Protocol Info 354 23.435868 193.162.0.193 193.162.0.197 TCP [TCP segment of a reassembled PDU] Frame 354: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 31248, Ack: 14377, Len: 1460 No. Time Source Destination Protocol Info 355 23.435907 193.162.0.193 193.162.0.197 SMB Write AndX Request, FID: 0x2f7f, 8976 bytes at offset 0 Frame 355: 338 bytes on wire (2704 bits), 338 bytes captured (2704 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 32708, Ack: 14377, Len: 284 [Reassembled TCP Segments (9044 bytes): #349(1460), #350(1460), #351(1460), #352(1460), #353(1460), #354(1460), #355(284)] NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 356 23.436093 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=14377 Ack=26868 Win=64240 Len=0 Frame 356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14377, Ack: 26868, Len: 0 No. Time Source Destination Protocol Info 357 23.436318 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=14377 Ack=29788 Win=64240 Len=0 Frame 357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14377, Ack: 29788, Len: 0 No. Time Source Destination Protocol Info 358 23.436566 193.162.0.197 193.162.0.193 TCP netbios-ssn > ams [ACK] Seq=14377 Ack=32708 Win=64240 Len=0 Frame 358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14377, Ack: 32708, Len: 0 No. Time Source Destination Protocol Info 359 23.436689 193.162.0.197 193.162.0.193 SMB Write AndX Response, FID: 0x2f7f, 8976 bytes Frame 359: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14377, Ack: 32992, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 360 23.437029 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 360: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 32992, Ack: 14428, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 361 23.437424 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 361: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14428, Ack: 33110, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 362 23.437671 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\test file.txt Frame 362: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33110, Ack: 14532, Len: 152 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 363 23.438185 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test file.txt Frame 363: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14532, Ack: 33262, Len: 192 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 364 23.438940 193.162.0.193 193.162.0.197 SMB Trans2 Request, SET_FILE_INFO, FID: 0x2f7f Frame 364: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33262, Ack: 14724, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 365 23.439223 193.162.0.197 193.162.0.193 SMB Trans2 Response, FID: 0x2f7f, SET_FILE_INFO Frame 365: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14724, Ack: 33350, Len: 62 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 366 23.450464 AsustekC_ca:b1:4b Broadcast ARP Who has 193.162.0.251? Tell 193.162.0.35 Frame 366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_ca:b1:4b (00:11:2f:ca:b1:4b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 367 23.560700 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=33350 Ack=14786 Win=65473 Len=0 Frame 367: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33350, Ack: 14786, Len: 0 No. Time Source Destination Protocol Info 368 23.950669 193.162.0.204 193.162.0.255 BROWSER Host Announcement NPI20E466, Server Frame 368: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: HewlettP_20:e4:66 (00:1b:78:20:e4:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.204 (193.162.0.204), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 369 24.020892 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 370 24.722763 MS-NLB-PhysServer-01_00:00:00:00 Broadcast MS NLB MS NLB heartbeat Frame 370: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: MS-NLB-PhysServer-01_00:00:00:00 (02:01:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff) MS Network Load Balancing No. Time Source Destination Protocol Info 371 26.076115 HonHaiPr_37:c9:19 Broadcast ARP Who has 193.162.0.3? Tell 193.162.0.10 Frame 371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_37:c9:19 (00:1c:25:37:c9:19), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 372 26.515218 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 372: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33350, Ack: 14786, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 373 26.515625 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 373: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14786, Ack: 33468, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 374 26.515774 193.162.0.193 193.162.0.197 SMB Trans2 Request, FIND_FIRST2, Pattern: \193.162.0.197\data\* Frame 374: 182 bytes on wire (1456 bits), 182 bytes captured (1456 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33468, Ack: 14890, Len: 128 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 375 26.516447 193.162.0.197 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: . .. _68A5Z~Z.TXT test file.txt Frame 375: 562 bytes on wire (4496 bits), 562 bytes captured (4496 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 14890, Ack: 33596, Len: 508 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 376 26.516829 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 376: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33596, Ack: 15398, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 377 26.517204 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 377: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 15398, Ack: 33714, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 378 26.517325 193.162.0.193 193.162.0.197 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \193.162.0.197\data Frame 378: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33714, Ack: 15502, Len: 118 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 379 26.517691 193.162.0.197 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 379: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 15502, Ack: 33832, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 380 26.732568 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=33832 Ack=15606 Win=64653 Len=0 Frame 380: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33832, Ack: 15606, Len: 0 No. Time Source Destination Protocol Info 381 27.073574 Foxconn_70:29:7a Broadcast ARP Who has 193.162.0.7? Tell 193.162.0.41 Frame 381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Foxconn_70:29:7a (00:15:58:70:29:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 382 27.079052 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 383 27.639168 193.162.0.193 193.162.0.197 SMB Close Request, FID: 0x2f7f Frame 383: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33832, Ack: 15606, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 384 27.639643 193.162.0.197 193.162.0.193 SMB Close Response, FID: 0x2f7f Frame 384: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: RealtekS_18:bc:29 (00:e0:4c:18:bc:29), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.197 (193.162.0.197), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ams (1037), Seq: 15606, Ack: 33877, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 385 27.826333 193.162.0.193 193.162.0.197 TCP ams > netbios-ssn [ACK] Seq=33877 Ack=15645 Win=64614 Len=0 Frame 385: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: RealtekS_18:bc:29 (00:e0:4c:18:bc:29) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.197 (193.162.0.197) Transmission Control Protocol, Src Port: ams (1037), Dst Port: netbios-ssn (139), Seq: 33877, Ack: 15645, Len: 0 No. Time Source Destination Protocol Info 386 28.391519 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 387 30.016438 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 388 32.411583 HonHaiPr_b4:d1:bb Broadcast ARP Who has 193.162.0.7? Tell 193.162.0.38 Frame 388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_b4:d1:bb (00:1c:25:b4:d1:bb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 389 33.094414 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 390 34.276871 193.162.0.141 255.255.255.255 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 390: 170 bytes on wire (1360 bits), 170 bytes captured (1360 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time Source Destination Protocol Info 391 34.277353 193.162.0.141 193.162.0.255 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 391: 170 bytes on wire (1360 bits), 170 bytes captured (1360 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time Source Destination Protocol Info 392 34.516331 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 393 34.722525 MS-NLB-PhysServer-01_00:00:00:00 Broadcast MS NLB MS NLB heartbeat Frame 393: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: MS-NLB-PhysServer-01_00:00:00:00 (02:01:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff) MS Network Load Balancing No. Time Source Destination Protocol Info 394 36.016204 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 395 36.499019 193.162.0.3 193.162.0.255 NBNS Name query NB DORA2<00> Frame 395: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_bb:b4:d2 (00:15:c5:bb:b4:d2), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.3 (193.162.0.3), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 396 36.499043 193.162.0.3 193.162.0.255 NBNS Name query NB DORA2<20> Frame 396: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_bb:b4:d2 (00:15:c5:bb:b4:d2), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.3 (193.162.0.3), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 397 37.119611 HonHaiPr_b4:d1:bb Broadcast ARP Who has 193.162.0.6? Tell 193.162.0.38 Frame 397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_b4:d1:bb (00:1c:25:b4:d1:bb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 398 37.460023 Foxconn_8d:6e:0b Broadcast ARP Who has 193.162.0.100? Tell 193.162.0.8 Frame 398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Foxconn_8d:6e:0b (00:15:58:8d:6e:0b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 399 37.578549 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 400 39.017524 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 401 40.238671 HonHaiPr_db:cf:27 Broadcast ARP Who has 193.162.0.205? Tell 193.162.0.34 Frame 401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_db:cf:27 (00:1c:25:db:cf:27), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 402 41.284304 193.162.0.22 193.162.0.255 NBNS Name query NB DANA2<20> Frame 402: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_d0:48:76 (f0:4d:a2:d0:48:76), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.22 (193.162.0.22), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 403 41.521787 HonHaiPr_b4:d1:bb Broadcast ARP Who has 193.162.0.4? Tell 193.162.0.38 Frame 403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_b4:d1:bb (00:1c:25:b4:d1:bb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 404 42.024823 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 405 42.629432 193.162.0.254 193.162.0.255 BROWSER Get Backup List Request Frame 405: 216 bytes on wire (1728 bits), 216 bytes captured (1728 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 406 42.629616 193.162.0.254 193.162.0.255 NBNS Name query NB READYMIX<1b> Frame 406: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 407 42.629664 AsustekC_5c:9d:b6 Broadcast ARP Who has 193.162.0.254? Tell 193.162.0.100 Frame 407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_5c:9d:b6 (00:1d:60:5c:9d:b6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 408 42.629765 193.162.0.100 193.162.0.255 NBNS Name query NB ORACLESRV<00> Frame 408: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: AsustekC_5c:9d:b6 (00:1d:60:5c:9d:b6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.100 (193.162.0.100), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 409 42.644681 193.162.0.254 193.162.0.255 NBNS Name query NB ORACLESRV2<20> Frame 409: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 410 42.644710 Ibm_53:4d:08 Broadcast ARP Who has 193.162.0.254? Tell 193.162.0.253 Frame 410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Ibm_53:4d:08 (00:21:5e:53:4d:08), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 411 43.201105 HonHaiPr_b4:d1:bb Broadcast ARP Who has 193.162.0.202? Tell 193.162.0.38 Frame 411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_b4:d1:bb (00:1c:25:b4:d1:bb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 412 43.515786 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 413 44.722244 MS-NLB-PhysServer-01_00:00:00:00 Broadcast MS NLB MS NLB heartbeat Frame 413: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: MS-NLB-PhysServer-01_00:00:00:00 (02:01:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff) MS Network Load Balancing No. Time Source Destination Protocol Info 414 45.015780 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 415 46.309816 AsustekC_ca:b1:4b Broadcast ARP Who has 193.162.0.199? Tell 193.162.0.35 Frame 415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_ca:b1:4b (00:11:2f:ca:b1:4b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 416 46.811065 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 416: 319 bytes on wire (2552 bits), 319 bytes captured (2552 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 417 46.811227 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 417: 319 bytes on wire (2552 bits), 319 bytes captured (2552 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 418 46.811466 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 418: 319 bytes on wire (2552 bits), 319 bytes captured (2552 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 419 46.811649 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 419: 319 bytes on wire (2552 bits), 319 bytes captured (2552 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 420 46.811861 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 420: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 421 46.812050 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 421: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 422 46.812264 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 422: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 423 46.812451 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 423: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 424 46.813347 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 424: 391 bytes on wire (3128 bits), 391 bytes captured (3128 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 425 46.813573 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 425: 391 bytes on wire (3128 bits), 391 bytes captured (3128 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 426 46.813843 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 426: 391 bytes on wire (3128 bits), 391 bytes captured (3128 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 427 46.814011 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 427: 391 bytes on wire (3128 bits), 391 bytes captured (3128 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 428 46.815320 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 428: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 429 46.815529 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 429: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 430 46.815778 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 430: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 431 46.815965 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 431: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 432 46.816642 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 432: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 433 46.816844 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 433: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 434 46.817050 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 434: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 435 46.817257 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 435: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 436 46.818291 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 436: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 437 46.818506 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 437: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 438 46.818734 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 438: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 439 46.818949 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 439: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 440 46.820207 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 440: 399 bytes on wire (3192 bits), 399 bytes captured (3192 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 441 46.820392 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 441: 399 bytes on wire (3192 bits), 399 bytes captured (3192 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 442 46.820647 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 442: 399 bytes on wire (3192 bits), 399 bytes captured (3192 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 443 46.820835 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 443: 399 bytes on wire (3192 bits), 399 bytes captured (3192 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 444 46.821592 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 444: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 445 46.821789 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 445: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 446 46.821991 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 446: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 447 46.822193 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 447: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 448 46.823177 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 448: 387 bytes on wire (3096 bits), 387 bytes captured (3096 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 449 46.823389 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 449: 387 bytes on wire (3096 bits), 387 bytes captured (3096 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 450 46.823612 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 450: 387 bytes on wire (3096 bits), 387 bytes captured (3096 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 451 46.823830 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 451: 387 bytes on wire (3096 bits), 387 bytes captured (3096 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 452 46.824756 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 452: 381 bytes on wire (3048 bits), 381 bytes captured (3048 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 453 46.824980 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 453: 381 bytes on wire (3048 bits), 381 bytes captured (3048 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 454 46.825216 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 454: 381 bytes on wire (3048 bits), 381 bytes captured (3048 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 455 46.825422 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 455: 381 bytes on wire (3048 bits), 381 bytes captured (3048 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 456 46.826373 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 456: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: Cisco-Li_bc:61:61 (00:1d:7e:bc:61:61), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 457 46.826609 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 457: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 458 46.826802 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 458: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 459 46.827024 193.162.0.91 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 459: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: EdimaxTe_8c:ce:df (00:0e:2e:8c:ce:df), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.91 (193.162.0.91), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol