22:28:22.173200 IP 192.168.0.10.25311 > guruplug.microsoft-ds: Flags [P.], seq 14353:14412, ack 1149138183, win 8192, length 59SMB PACKET: SMBecho (REQUEST) 22:28:22.177018 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [P.], seq 1:60, ack 59, win 5360, length 59SMB PACKET: SMBecho (REPLY) 22:28:22.312285 IP 192.168.0.10.25311 > guruplug.microsoft-ds: Flags [.], ack 60, win 8192, length 0 22:28:23.201679 IP 192.168.0.10.25311 > guruplug.microsoft-ds: Flags [F.], seq 59, ack 60, win 8192, length 0 22:28:23.211856 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:23.473305 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:24.013298 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:25.093312 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:27.253293 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:31.583311 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:40.243315 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:56.571419 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [S], seq 6533, win 8192, options [mss 1460], length 0 22:28:56.571559 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [S.], seq 2240576958, ack 6534, win 4380, options [mss 1460], length 0 22:28:56.580612 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1:52, ack 1, win 8192, length 51SMB PACKET: SMBnegprot (REQUEST) 22:28:56.580730 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [.], ack 52, win 4380, length 0 22:28:56.600314 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1:106, ack 52, win 4380, length 105SMB PACKET: SMBnegprot (REPLY) 22:28:56.609047 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 52:184, ack 106, win 8192, length 132SMB PACKET: SMBsesssetupX (REQUEST) 22:28:56.622870 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 106:210, ack 184, win 5360, length 104SMB PACKET: SMBsesssetupX (REPLY) 22:28:56.631614 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 184:240, ack 210, win 8192, length 56SMB PACKET: SMBecho (REQUEST) 22:28:56.634389 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 210:266, ack 240, win 5360, length 56SMB PACKET: SMBecho (REPLY) 22:28:56.644421 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 240:336, ack 266, win 8192, length 96SMB PACKET: SMBtconX (REQUEST) 22:28:56.676303 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 266:324, ack 336, win 5360, length 58SMB PACKET: SMBtconX (REPLY) 22:28:56.687058 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 336:424, ack 324, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.692003 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 324:363, ack 424, win 5360, length 39SMB PACKET: SMBtrans2 (REPLY) 22:28:56.702344 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 424:512, ack 363, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.707831 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 363:463, ack 512, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:56.716283 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 512:600, ack 463, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.720967 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 463:551, ack 600, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:56.730466 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 600:686, ack 551, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.735708 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 551:651, ack 686, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:56.745475 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 686:772, ack 651, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.750222 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 651:739, ack 772, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:56.759926 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 772:860, ack 739, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.765169 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 739:839, ack 860, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:56.773608 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 860:948, ack 839, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.778249 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 839:927, ack 948, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:56.788601 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 948:1053, ack 927, win 8192, length 105SMB PACKET: SMBntcreateX (REQUEST) 22:28:56.793177 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 927:966, ack 1053, win 5360, length 39SMB PACKET: SMBntcreateX (REPLY) 22:28:56.803610 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1053:1139, ack 966, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.808742 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 966:1066, ack 1139, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:56.817193 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1139:1225, ack 1066, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.821805 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1066:1154, ack 1225, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:56.830661 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1225:1321, ack 1154, win 8192, length 96SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.837627 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1154:1322, ack 1321, win 5360, length 168SMB PACKET: SMBtrans2 (REPLY) 22:28:56.847945 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1321:1406, ack 1322, win 8192, length 85SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.850697 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1322:1361, ack 1406, win 5360, length 39SMB PACKET: SMBtrans2 (REPLY) 22:28:56.861072 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1406:1494, ack 1361, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.866322 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1361:1461, ack 1494, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:56.874747 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1494:1582, ack 1461, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.879338 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1461:1549, ack 1582, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:56.888641 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1582:1680, ack 1549, win 8192, length 98SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.895165 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1549:1717, ack 1680, win 5360, length 168SMB PACKET: SMBtrans2 (REPLY) 22:28:56.899444 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 1717, win 8192, length 0 22:28:56.905670 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1680:1765, ack 1717, win 8192, length 85SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.908347 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1717:1756, ack 1765, win 5360, length 39SMB PACKET: SMBtrans2 (REPLY) 22:28:56.917856 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1765:1870, ack 1756, win 8192, length 105SMB PACKET: SMBntcreateX (REQUEST) 22:28:56.922312 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1756:1795, ack 1870, win 5360, length 39SMB PACKET: SMBntcreateX (REPLY) 22:28:56.931576 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1870:1956, ack 1795, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.936747 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1795:1895, ack 1956, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:56.946628 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 1956:2042, ack 1895, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.951257 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1895:1983, ack 2042, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:56.961408 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2042:2130, ack 1983, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.966649 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 1983:2083, ack 2130, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:56.975070 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2130:2218, ack 2083, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:56.979656 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2083:2171, ack 2218, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:56.989466 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2218:2323, ack 2171, win 8192, length 105SMB PACKET: SMBntcreateX (REQUEST) 22:28:56.993976 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2171:2210, ack 2323, win 5360, length 39SMB PACKET: SMBntcreateX (REPLY) 22:28:57.062956 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 2210, win 8192, length 0 22:28:57.543312 IP guruplug.microsoft-ds > 192.168.0.10.25311: Flags [F.], seq 60, ack 60, win 5360, length 0 22:28:57.543580 IP 192.168.0.10.25311 > guruplug.microsoft-ds: Flags [R.], seq 60, ack 61, win 8192, length 0 22:28:58.734997 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2323:2409, ack 2210, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:58.759624 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2210:2310, ack 2409, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:58.768505 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2409:2495, ack 2310, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:28:58.773543 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2310:2398, ack 2495, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:58.783999 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2495:2583, ack 2398, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:58.789176 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2398:2498, ack 2583, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:28:58.797592 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2583:2671, ack 2498, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:28:58.802238 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2498:2586, ack 2671, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:28:58.815173 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2671:2776, ack 2586, win 8192, length 105SMB PACKET: SMBntcreateX (REQUEST) 22:28:58.819651 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2586:2625, ack 2776, win 5360, length 39SMB PACKET: SMBntcreateX (REPLY) 22:28:58.865228 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 2625, win 8192, length 0 22:29:01.828625 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2776:2835, ack 2625, win 8192, length 59SMB PACKET: SMBecho (REQUEST) 22:29:01.832482 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2625:2684, ack 2835, win 5360, length 59SMB PACKET: SMBecho (REPLY) 22:29:01.978245 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 2684, win 8192, length 0 22:29:03.754660 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2835:2921, ack 2684, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:29:03.764099 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2684:2784, ack 2921, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:29:03.772541 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 2921:3007, ack 2784, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:29:03.777570 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2784:2872, ack 3007, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:03.780737 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 2872, win 8192, length 0 22:29:03.788594 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3007:3095, ack 2872, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:29:03.793832 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2872:2972, ack 3095, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:29:03.803411 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3095:3183, ack 2972, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:29:03.808029 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 2972:3060, ack 3183, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:03.817407 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3183:3288, ack 3060, win 8192, length 105SMB PACKET: SMBntcreateX (REQUEST) 22:29:03.821919 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3060:3099, ack 3288, win 5360, length 39SMB PACKET: SMBntcreateX (REPLY) 22:29:03.944355 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 3099, win 8192, length 0 22:29:06.830457 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3288:3347, ack 3099, win 8192, length 59SMB PACKET: SMBecho (REQUEST) 22:29:06.833588 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3099:3158, ack 3347, win 5360, length 59SMB PACKET: SMBecho (REPLY) 22:29:06.893528 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 3158, win 8192, length 0 22:29:08.774659 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3347:3433, ack 3158, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:29:08.783483 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3158:3258, ack 3433, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:29:08.791925 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3433:3519, ack 3258, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:29:08.796699 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3258:3346, ack 3519, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:08.806880 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3519:3607, ack 3346, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:29:08.812048 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3346:3446, ack 3607, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:29:08.821423 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3607:3695, ack 3446, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:29:08.826088 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3446:3534, ack 3695, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:08.835441 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3695:3800, ack 3534, win 8192, length 105SMB PACKET: SMBntcreateX (REQUEST) 22:29:08.839960 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3534:3573, ack 3800, win 5360, length 39SMB PACKET: SMBntcreateX (REPLY) 22:29:08.859666 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 3573, win 8192, length 0 22:29:11.848933 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3800:3859, ack 3573, win 8192, length 59SMB PACKET: SMBecho (REQUEST) 22:29:11.852005 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3573:3632, ack 3859, win 5360, length 59SMB PACKET: SMBecho (REPLY) 22:29:11.972657 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 3632, win 8192, length 0 22:29:13.794788 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3859:3945, ack 3632, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:29:13.803481 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3632:3732, ack 3945, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:29:13.811923 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 3945:4031, ack 3732, win 8192, length 86SMB PACKET: SMBtrans2 (REQUEST) 22:29:13.816801 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3732:3820, ack 4031, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:13.826983 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 4031:4119, ack 3820, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:29:13.832141 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3820:3920, ack 4119, win 5360, length 100SMB PACKET: SMBtrans2 (REPLY) 22:29:13.841542 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 4119:4207, ack 3920, win 8192, length 88SMB PACKET: SMBtrans2 (REQUEST) 22:29:13.846271 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 3920:4008, ack 4207, win 5360, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:13.855629 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 4207:4312, ack 4008, win 8192, length 105SMB PACKET: SMBntcreateX (REQUEST) 22:29:13.860121 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 4008:4047, ack 4312, win 5360, length 39SMB PACKET: SMBntcreateX (REPLY) 22:29:13.938769 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 4047, win 8192, length 0 22:29:14.503117 IP 192.168.0.2.51652 > guruplug.microsoft-ds: Flags [R.], seq 3635641189, ack 3177553808, win 0, length 0 22:29:14.503429 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [S], seq 2742524846, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0 22:29:14.503540 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [S.], seq 2520763307, ack 2742524847, win 4380, options [mss 1460,nop,nop,sackOK,nop,wscale 5], length 0 22:29:14.505349 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [.], ack 1, win 4380, length 0 22:29:14.553434 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1:138, ack 1, win 4380, length 137SMB PACKET: SMBnegprot (REQUEST) 22:29:14.553546 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [.], ack 138, win 171, length 0 22:29:14.562400 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 1:132, ack 138, win 171, length 131SMB PACKET: SMBnegprot (REPLY) 22:29:14.564588 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 138:280, ack 132, win 4347, length 142SMB PACKET: SMBsesssetupX (REQUEST) 22:29:14.577586 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 132:400, ack 280, win 204, length 268SMB PACKET: SMBsesssetupX (REPLY) 22:29:14.589120 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 280:696, ack 400, win 4280, length 416SMB PACKET: SMBsesssetupX (REQUEST) 22:29:14.606693 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 400:514, ack 696, win 238, length 114SMB PACKET: SMBsesssetupX (REPLY) 22:29:14.608710 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 696:794, ack 514, win 4251, length 98SMB PACKET: SMBtconX (REQUEST) 22:29:14.639851 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 514:580, ack 794, win 238, length 66SMB PACKET: SMBtconX (REPLY) 22:29:14.641517 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 794:884, ack 580, win 4235, length 90SMB PACKET: SMBntcreateX (REQUEST) 22:29:14.651883 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 580:719, ack 884, win 238, length 139SMB PACKET: SMBntcreateX (REPLY) 22:29:14.653593 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 884:960, ack 719, win 4200, length 76SMB PACKET: SMBtrans2 (REQUEST) 22:29:14.658296 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 719:791, ack 960, win 238, length 72SMB PACKET: SMBtrans2 (REPLY) 22:29:14.660016 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 960:1036, ack 791, win 4182, length 76SMB PACKET: SMBtrans2 (REQUEST) 22:29:14.664714 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 791:879, ack 1036, win 238, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:14.667735 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1036:1126, ack 879, win 4160, length 90SMB PACKET: SMBtrans2 (REQUEST) 22:29:14.703319 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [.], ack 1126, win 238, length 0 22:29:14.719123 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [.], seq 879:5259, ack 1126, win 238, length 4380WARNING: Packet is continued in later TCP segments SMB PACKET: SMBtrans2 (REPLY) 22:29:14.719366 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 5259:5655, ack 1126, win 238, length 396SMB-over-TCP packet:(raw data or continuation?) 22:29:14.721961 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [.], ack 3799, win 4380, length 0 22:29:14.723782 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [.], ack 5655, win 4380, length 0 22:29:14.724228 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1126:1171, ack 5655, win 4380, length 45SMB PACKET: SMBclose (REQUEST) 22:29:14.724587 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [.], ack 1171, win 238, length 0 22:29:14.727480 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 5655:5694, ack 1171, win 238, length 39SMB PACKET: SMBclose (REPLY) 22:29:14.924261 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [.], ack 5694, win 4370, length 0 22:29:16.869091 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [P.], seq 4312:4371, ack 4047, win 8192, length 59SMB PACKET: SMBecho (REQUEST) 22:29:16.872823 IP guruplug.microsoft-ds > 192.168.0.10.6180: Flags [P.], seq 4047:4106, ack 4371, win 5360, length 59SMB PACKET: SMBecho (REPLY) 22:29:16.887945 IP 192.168.0.10.6180 > guruplug.microsoft-ds: Flags [.], ack 4106, win 8192, length 0 22:29:17.210962 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1171:1283, ack 5694, win 4370, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.216882 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 5694:5798, ack 1283, win 238, length 104SMB PACKET: SMBtrans2 (REPLY) 22:29:17.218712 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1283:1395, ack 5798, win 4344, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.223767 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 5798:5886, ack 1395, win 238, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:17.225572 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1395:1507, ack 5886, win 4322, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.230547 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 5886:5974, ack 1507, win 238, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:17.232357 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1507:1619, ack 5974, win 4300, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.237897 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 5974:6078, ack 1619, win 238, length 104SMB PACKET: SMBtrans2 (REPLY) 22:29:17.239966 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1619:1731, ack 6078, win 4274, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.245501 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 6078:6182, ack 1731, win 238, length 104SMB PACKET: SMBtrans2 (REPLY) 22:29:17.249539 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1731:1843, ack 6182, win 4248, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.254540 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 6182:6270, ack 1843, win 238, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:17.256330 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1843:1955, ack 6270, win 4226, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.261246 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 6270:6358, ack 1955, win 238, length 88SMB PACKET: SMBtrans2 (REPLY) 22:29:17.263058 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 1955:2067, ack 6358, win 4204, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.268643 IP guruplug.microsoft-ds > 192.168.0.2.51693: Flags [P.], seq 6358:6462, ack 2067, win 238, length 104SMB PACKET: SMBtrans2 (REPLY) 22:29:17.275797 IP 192.168.0.2.51693 > guruplug.microsoft-ds: Flags [P.], seq 2067:2179, ack 6462, win 4178, length 112SMB PACKET: SMBtrans2 (REQUEST) 22:29:17.28130