1*05b00f60SXin Li 1 15:35:08.640523 IP (tos 0x0, ttl 128, id 376, offset 0, flags [DF], proto TCP (6), length 128) 2*05b00f60SXin Li 192.168.56.55.445 > 192.168.56.119.49199: Flags [P.], cksum 0x3e2f (incorrect -> 0x3e31), seq 4267808374:4267808462, ack 628292694, win 63102, length 88 3*05b00f60SXin LiSMB PACKET: SMBtrans2 (REPLY) 4*05b00f60SXin LiSMB Command = 0x32 5*05b00f60SXin LiError class = 0x0 6*05b00f60SXin LiError code = 0 (0x0) 7*05b00f60SXin LiFlags1 = 0x96 8*05b00f60SXin LiFlags2 = 0x7 9*05b00f60SXin LiTree ID = 2048 (0x800) 10*05b00f60SXin LiProc ID = 2848 (0xb20) 11*05b00f60SXin LiUID = 4098 (0x1002) 12*05b00f60SXin LiMID = 1616 (0x650) 13*05b00f60SXin LiWord Count = 10 (0xa) 14*05b00f60SXin LiTRANSACT2_OPEN param_length=2 data_length=24 15*05b00f60SXin LiTotParam=2 (0x2) 16*05b00f60SXin LiTotData=24 (0x18) 17*05b00f60SXin LiRes1=0x0 18*05b00f60SXin LiParamCnt=2 (0x2) 19*05b00f60SXin LiParamOff=56 (0x38) 20*05b00f60SXin LiParamDisp0 (0x0) 21*05b00f60SXin LiDataCnt=24 (0x18) 22*05b00f60SXin LiDataOff=60 (0x3c) 23*05b00f60SXin LiDataDisp=0 (0x0) 24*05b00f60SXin LiSetupCnt=0 (0x0) 25*05b00f60SXin Lismb_bcc=29 26*05b00f60SXin LiHandle=0 (0x0) 27*05b00f60SXin LiAttrib=Data= 28*05b00f60SXin LiData: (24 bytes) 29*05b00f60SXin Li[000] 00 00 0B 00 00 00 00 00 00 00 00 00 00 00 00 00 ^@^@^K^@^@^@^@^@ ^@^@^@^@^@^@^@^@ 30*05b00f60SXin Li[010] 01 00 00 00 00 00 00 00 ^A^@^@^@^@^@^@^@ 31*05b00f60SXin Li 32*05b00f60SXin Li 2 15:35:08.640906 IP (tos 0x0, ttl 128, id 632, offset 0, flags [DF], proto TCP (6), length 114) 33*05b00f60SXin Li 192.168.56.119.49199 > 192.168.56.55.445: Flags [P.], cksum 0x2437 (correct), seq 1:75, ack 88, win 254, length 74 34*05b00f60SXin LiSMB PACKET: SMBtrans2 (REQUEST) 35*05b00f60SXin LiSMB Command = 0x32 36*05b00f60SXin LiError class = 0x0 37*05b00f60SXin LiError code = 0 (0x0) 38*05b00f60SXin LiFlags1 = 0x18 39*05b00f60SXin LiFlags2 = 0x7 40*05b00f60SXin LiTree ID = 2048 (0x800) 41*05b00f60SXin LiProc ID = 2848 (0xb20) 42*05b00f60SXin LiUID = 4098 (0x1002) 43*05b00f60SXin LiMID = 1632 (0x660) 44*05b00f60SXin LiWord Count = 15 (0xf) 45*05b00f60SXin LiTRANSACT2_QFSINFO param_length=2 data_length=0 46*05b00f60SXin LiTotParam=2 (0x2) 47*05b00f60SXin LiTotData=0 (0x0) 48*05b00f60SXin LiMaxParam=0 (0x0) 49*05b00f60SXin LiMaxData=560 (0x230) 50*05b00f60SXin LiMaxSetup=0 (0x0) 51*05b00f60SXin LiFlags=0x0 52*05b00f60SXin LiTimeOut=0 (0x0) 53*05b00f60SXin LiRes1=0x0 54*05b00f60SXin LiParamCnt=2 (0x2) 55*05b00f60SXin LiParamOff=68 (0x44) 56*05b00f60SXin LiDataCnt=0 (0x0) 57*05b00f60SXin LiDataOff=0 (0x0) 58*05b00f60SXin LiSetupCnt=1 (0x1) 59*05b00f60SXin Lismb_bcc=5 60*05b00f60SXin LiInfoLevel=261 (0x105) 61*05b00f60SXin Li 62*05b00f60SXin Li 3 15:35:08.641033 IP (tos 0x0, ttl 128, id 377, offset 0, flags [DF], proto TCP (6), length 120) 63*05b00f60SXin Li 192.168.56.55.445 > 192.168.56.119.49199: Flags [P.], cksum 0x00fb (incorrect -> 0x11f5), seq 88:168, ack 75, win 62978, length 80 64*05b00f60SXin LiSMB PACKET: SMBtrans2 (REPLY) 65*05b00f60SXin LiSMB Command = 0x32 66*05b00f60SXin LiError class = 0x0 67*05b00f60SXin LiError code = 0 (0x0) 68*05b00f60SXin LiFlags1 = 0x98 69*05b00f60SXin LiFlags2 = 0x0 70*05b00f60SXin LiTree ID = 2048 (0x800) 71*05b00f60SXin LiProc ID = 2848 (0xb20) 72*05b00f60SXin LiUID = 4098 (0x1002) 73*05b00f60SXin LiMID = 1632 (0x660) 74*05b00f60SXin LiWord Count = 10 (0xa) 75*05b00f60SXin LiTRANSACT2_QFSINFO param_length=0 data_length=20 76*05b00f60SXin LiTotParam=0 (0x0) 77*05b00f60SXin LiTotData=20 (0x14) 78*05b00f60SXin LiRes1=0x0 79*05b00f60SXin LiParamCnt=0 (0x0) 80*05b00f60SXin LiParamOff=56 (0x38) 81*05b00f60SXin LiParamDisp0 (0x0) 82*05b00f60SXin LiDataCnt=20 (0x14) 83*05b00f60SXin LiDataOff=56 (0x38) 84*05b00f60SXin LiDataDisp=0 (0x0) 85*05b00f60SXin LiSetupCnt=0 (0x0) 86*05b00f60SXin Lismb_bcc=21 87*05b00f60SXin LiCapabilities=0x700FF 88*05b00f60SXin LiMaxFileLen=255 (0xff) 89*05b00f60SXin LiVolNameLen=4293394440 90*05b00f60SXin LiVolume=M [|smb] 91*05b00f60SXin Lidata: 92*05b00f60SXin Li[000] FF 00 07 00 FF 00 00 00 08 00 E8 FF 4D 00 54 00 M-^?^@^G^@M-^?^@^@^@ ^H^@M-hM-^?M^@T^@ 93*05b00f60SXin Li[010] 46 00 53 00 F^@S^@ 94*05b00f60SXin Li 95*05b00f60SXin Li 4 15:35:08.641358 IP (tos 0x0, ttl 128, id 633, offset 0, flags [DF], proto TCP (6), length 116) 96*05b00f60SXin Li 192.168.56.119.49199 > 192.168.56.55.445: Flags [P.], cksum 0x2253 (correct), seq 75:151, ack 168, win 253, length 76 97*05b00f60SXin LiSMB PACKET: SMBtrans2 (REQUEST) 98*05b00f60SXin LiSMB Command = 0x32 99*05b00f60SXin LiError class = 0x0 100*05b00f60SXin LiError code = 0 (0x0) 101*05b00f60SXin LiFlags1 = 0x18 102*05b00f60SXin LiFlags2 = 0x7 103*05b00f60SXin LiTree ID = 2048 (0x800) 104*05b00f60SXin LiProc ID = 2848 (0xb20) 105*05b00f60SXin LiUID = 4098 (0x1002) 106*05b00f60SXin LiMID = 1648 (0x670) 107*05b00f60SXin LiWord Count = 15 (0xf) 108*05b00f60SXin LiTRANSACT2_QFILEINFO param_length=4 data_length=0 109*05b00f60SXin LiTotParam=4 (0x4) 110*05b00f60SXin LiTotData=0 (0x0) 111*05b00f60SXin LiMaxParam=2 (0x2) 112*05b00f60SXin LiMaxData=40 (0x28) 113*05b00f60SXin LiMaxSetup=0 (0x0) 114*05b00f60SXin LiFlags=0x0 115*05b00f60SXin LiTimeOut=0 (0x0) 116*05b00f60SXin LiRes1=0x0 117*05b00f60SXin LiParamCnt=4 (0x4) 118*05b00f60SXin LiParamOff=68 (0x44) 119*05b00f60SXin LiDataCnt=0 (0x0) 120*05b00f60SXin LiDataOff=0 (0x0) 121*05b00f60SXin LiSetupCnt=1 (0x1) 122*05b00f60SXin Lismb_bcc=7 123*05b00f60SXin LiParameters= 124*05b00f60SXin LiData: (4 bytes) 125*05b00f60SXin Li[000] 0C 40 EC 03 ^L@M-l^C 126*05b00f60SXin LiData= 127*05b00f60SXin Li 128