lkml.org 
[lkml]   [2002]   [Mar]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: reading your email via tcpdump
    On Tue, 19 Mar 2002, John Jasen wrote:

    > Sorry, I lost track of attributions. Need more coffee,
    >
    >
    > > > 16:42:49.412862 10.0.0.101.netbios-dgm > 10.255.255.255.netbios-dgm:
    > > > >>> NBT UDP PACKET(138) Res=0x1102 ID=0x54 IP=10.0.0.101 Port=138 Length=193
    > > > Res2=0x0
    > > > SourceName=T1H6I3 NameType=0x00 (Workstation)
    > > > DestName=
    > > > SMB PACKET: SMBunknown (REQUEST)
    > > > SMB Command = 0x43
    > > > Error class = 0x46
    > > > Error code = 20550
    > > > Flags1 = 0x45
    > > > Flags2 = 0x4E
    > > > Tree ID = 17990
    > > > Proc ID = 18000
    > > > UID = 16720
    > > > MID = 16707
    > > > Word Count = 66
    > > > SMBError = ERROR: Unknown error (70,20550)
    >
    > This looks like standard SMB garbage. It probably repeats on a regular
    > basis. From what I remember, I think it is a Windows box browsing
    > the network trying to discover other SMB boxes, finding a 'master
    > browser', and other such stuff.

    Yeah, this part is normal loking junk. The abby-normal looking
    bit got snipped :)

    -Mike

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:25    [W:0.024 / U:29.620 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site