* RE: iptables and samba
@ 2004-05-27 15:40 azeem ahmad
2004-05-27 16:00 ` Antony Stone
2004-05-27 16:28 ` alexis
0 siblings, 2 replies; 11+ messages in thread
From: azeem ahmad @ 2004-05-27 15:40 UTC (permalink / raw)
To: netfilter
no one out there could help me?
>From: "azeem ahmad" <azeem484@hotmail.com>
>To: netfilter@lists.netfilter.org
>Subject: iptables and samba
>Date: Sun, 23 May 2004 09:20:52 +0000
>
>hi
>i m using the script below
>-------------------------------------------------------------------------------------------------------------------------------------
>iptables -F
>iptables -t nat -F
>iptables -P INPUT DROP
>iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
>iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
>iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
>iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
>iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
>iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
>iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
>iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
>
>iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
>#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 8080
>
>iptables -P FORWARD DROP
>iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
>iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
>
>iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
>-------------------------------------------------------------------------------------------------------------------------------------
>
>i have two shares on samba server "Soft and linux" in these shares there
>are many folders. whenever i run the above script and then i open the share
>it takes atleast 4 minutes to open the share. but it doesnt take time
>while browsing inside share.
>mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
>when i double click on soft it takes atleast 4 minutes but after that when
>i click on adobe then acrobat then acrobat6 it takes now time it just brose
>them normally. same problem is with the other share named linux.
>but if i dont run this script then all shares work fine with no delay
>
>i dont know what is the udp port 80 for but i just saw its traffic on my
>network in iptraf so i included it in my script
>
>Regards
>Azeem
>
>_________________________________________________________________
>Add photos to your e-mail with MSN 8. Get 2 months FREE*.
>http://join.msn.com/?page=features/featuredemail
>
>
_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: iptables and samba
2004-05-27 15:40 iptables and samba azeem ahmad
@ 2004-05-27 16:00 ` Antony Stone
2004-05-27 16:28 ` alexis
1 sibling, 0 replies; 11+ messages in thread
From: Antony Stone @ 2004-05-27 16:00 UTC (permalink / raw)
To: netfilter
On Thursday 27 May 2004 4:40 pm, azeem ahmad wrote:
> >hi
> >
> >i have two shares on samba server "Soft and linux" in these shares there
> >are many folders. whenever i run the above script and then i open the
> > share it takes atleast 4 minutes to open the share. but it doesnt take
> > time while browsing inside share.
> >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
> >when i double click on soft it takes atleast 4 minutes but after that when
> >i click on adobe then acrobat then acrobat6 it takes now time it just
> > brose them normally. same problem is with the other share named linux.
> >but if i dont run this script then all shares work fine with no delay
> >
> >i m using the script below
> >
> > iptables -F
> >iptables -t nat -F
> >iptables -P INPUT DROP
> >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
> >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
> >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
> >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
I think you should check the above three services - I'm not sure you have TCP
& UDP correctly associated with the port numbers (I thought the two odd ones
were one protocol, and 138 was the other protocol, but which way round I
don't recall).
Also, add a LOG rule at the end of the ruleset so you can see any other
packets which are trying to get in, but are getting DROPped by the default
policy - if, as you say, the problem doesn't occur when you don't run the
ruleset, there must be something being DROPped which would solve the problem
if you ACCEPTed it.
> >i dont know what is the udp port 80 for but i just saw its traffic on my
> >network in iptraf so i included it in my script
That doesn't like a secure reason to allow it to me - and I have no idea what
could be using UDP port 80 - I think you should investigate further rather
than just assume it's desirable.
Regards,
Antony.
--
In science, one tries to tell people
in such a way as to be understood by everyone
something that no-one ever knew before.
In poetry, it is the exact opposite.
- Paul Dirac
Please reply to the list;
please don't CC me.
^ permalink raw reply [flat|nested] 11+ messages in thread* RE: iptables and samba
2004-05-27 15:40 iptables and samba azeem ahmad
2004-05-27 16:00 ` Antony Stone
@ 2004-05-27 16:28 ` alexis
1 sibling, 0 replies; 11+ messages in thread
From: alexis @ 2004-05-27 16:28 UTC (permalink / raw)
To: azeem ahmad; +Cc: netfilter
it seems a name resolution issue.
check if you're using WINS or DNS and make sure you're allowing those ports
in orden to resolve the names. and it will work just fine
azeem ahmad <azeem484@hotmail.com> dijo:
>
> no one out there could help me?
>
> >From: "azeem ahmad" <azeem484@hotmail.com>
> >To: netfilter@lists.netfilter.org
> >Subject: iptables and samba
> >Date: Sun, 23 May 2004 09:20:52 +0000
> >
> >hi
> >i m using the script below
> >---------------------------------------------------------------------------
----------------------------------------------------------
> >iptables -F
> >iptables -t nat -F
> >iptables -P INPUT DROP
> >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
> >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
> >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
> >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
> >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
> >
> >iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
> >#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 8080
> >
> >iptables -P FORWARD DROP
> >iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
> >iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
> >
> >iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> >---------------------------------------------------------------------------
----------------------------------------------------------
> >
> >i have two shares on samba server "Soft and linux" in these shares there
> >are many folders. whenever i run the above script and then i open the
share
> >it takes atleast 4 minutes to open the share. but it doesnt take time
> >while browsing inside share.
> >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
> >when i double click on soft it takes atleast 4 minutes but after that when
> >i click on adobe then acrobat then acrobat6 it takes now time it just
brose
> >them normally. same problem is with the other share named linux.
> >but if i dont run this script then all shares work fine with no delay
> >
> >i dont know what is the udp port 80 for but i just saw its traffic on my
> >network in iptraf so i included it in my script
> >
> >Regards
> >Azeem
> >
> >_________________________________________________________________
> >Add photos to your e-mail with MSN 8. Get 2 months FREE*.
> >http://join.msn.com/?page=features/featuredemail
> >
> >
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
>
>
--
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: iptables and samba
@ 2004-05-31 20:38 azeem ahmad
0 siblings, 0 replies; 11+ messages in thread
From: azeem ahmad @ 2004-05-31 20:38 UTC (permalink / raw)
To: alexis, netfilter
hi
if i remove the rule for transparent redirection from my firewall script
then it starts working well. what can be the connection of port 80
transparent redirection with samba
plz help me out. im in much trouble
Regards
Azeem
>From: <alexis@tpys.com.ar>
>To: "azeem ahmad" <azeem484@hotmail.com>
>CC: <netfilter@lists.netfilter.org>
>Subject: RE: iptables and samba
>Date: Thu, 27 May 2004 16:28:35 -0000
>
>it seems a name resolution issue.
>
>check if you're using WINS or DNS and make sure you're allowing those ports
>in orden to resolve the names. and it will work just fine
>
>azeem ahmad <azeem484@hotmail.com> dijo:
>
> >
> > no one out there could help me?
> >
> > >From: "azeem ahmad" <azeem484@hotmail.com>
> > >To: netfilter@lists.netfilter.org
> > >Subject: iptables and samba
> > >Date: Sun, 23 May 2004 09:20:52 +0000
> > >
> > >hi
> > >i m using the script below
> >
> >---------------------------------------------------------------------------
>----------------------------------------------------------
> > >iptables -F
> > >iptables -t nat -F
> > >iptables -P INPUT DROP
> > >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
> > >
> > >iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
>8080
> > >#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port
>8080
> > >
> > >iptables -P FORWARD DROP
> > >iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
> > >
> > >iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> >
> >---------------------------------------------------------------------------
>----------------------------------------------------------
> > >
> > >i have two shares on samba server "Soft and linux" in these shares
>there
> > >are many folders. whenever i run the above script and then i open the
>share
> > >it takes atleast 4 minutes to open the share. but it doesnt take time
> > >while browsing inside share.
> > >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
> > >when i double click on soft it takes atleast 4 minutes but after that
>when
> > >i click on adobe then acrobat then acrobat6 it takes now time it just
>brose
> > >them normally. same problem is with the other share named linux.
> > >but if i dont run this script then all shares work fine with no delay
> > >
> > >i dont know what is the udp port 80 for but i just saw its traffic on
>my
> > >network in iptraf so i included it in my script
> > >
> > >Regards
> > >Azeem
> > >
_________________________________________________________________
Add photos to your messages with MSN 8. Get 2 months FREE*.
http://join.msn.com/?page=features/featuredemail
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: iptables and samba
@ 2004-05-28 19:44 Aldo Lagana
0 siblings, 0 replies; 11+ messages in thread
From: Aldo Lagana @ 2004-05-28 19:44 UTC (permalink / raw)
To: 'azeem ahmad', netfilter
You are not getting any response since this has nothing to do with
routing/firewalling it has to do with samba and how samba works. Since you
do not have a domain samba works very peculiar - like it will broadcast and
then wait to send out directed datagrams.
Again read up on samba - what my opinion is is that the client is beginning
with a broadcast which doesn't get forwarded; the client then waits for a
timeout and finally directs a datagram to the samba server directly which
then does make it through the router.
-----Original Message-----
From: azeem ahmad [mailto:azeem484@hotmail.com]
Sent: Friday, May 28, 2004 3:33 PM
To: netfilter@lists.netfilter.org
Subject: RE: iptables and samba
the output of tcpdump that i have posted i last message is the output of the
command
#tcpdump -i eth0 host 192.168.0.2
and i only have one internal interface eth0 and one extrnal interface ppp0
Regards
Azeem
>From: Aldo Lagana <ALagana@p21.com>
>To: 'azeem ahmad' <azeem484@hotmail.com>, netfilter@lists.netfilter.org
>Subject: RE: iptables and samba
>Date: Thu, 27 May 2004 17:07:19 -0400
>
>tcpdump individually on the interfaces that the routing is going through
>while you attempt to 'browse' or whatever.
>You should see packets coming into your input interface but maybe NOT going
>out the output interface?!?
>
># tcpdump -i eth0 > /home/eth0.log &
># tcpdump -i eth1 > /home/eth1.log &
>
>(dont forget to kill both processes when done!)
>
>-----Original Message-----
>From: azeem ahmad [mailto:azeem484@hotmail.com]
>Sent: Thursday, May 27, 2004 4:57 PM
>To: netfilter@lists.netfilter.org
>Subject: RE: iptables and samba
>
>
>
>
>neither WINS nor DNS is on my network. only a caching only name server i m
>running. and i captured the output of /var/log/messages and that is as
>below
>and i added rules for port udp 137,139,139 and tcp 137,138,139 mean all
>three ports of both protocols but it doesnt seem to work
>
>---------------------------------------------------------------------------
-
>--------------------------------------------------
>May 28 01:36:27 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51870 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1024
>May 28 01:36:32 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51873 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1280
>May 28 01:36:38 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51878 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1536
>May 28 01:36:43 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51879 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1792
>May 28 01:36:57 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=51 TOS=0x00 PREC=0x00 TTL=128 ID=51886 PROTO=UDP
>SPT=8167 DPT=8167 LEN=31
>May 28 01:36:59 subzero samba(pam_unix)[2284]: session closed for user
>azeem
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=81 TOS=0x00 PREC=0x00 TTL=128 ID=32 PROTO=UDP
>SPT=8167 DPT=8167 LEN=61
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=33 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=35 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:29 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=43 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:59 subzero samba(pam_unix)[2552]: session opened for user must
>by (uid=0)
>May 28 01:39:33 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7796 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:36 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7797 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:42 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7798 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:50 subzero kernel: IN=ppp0 OUT= MAC= SRC=202.124.201.161
>DST=202.124.192.166 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=38996 DF PROTO=TCP
>SPT=4811 DPT=2745 WINDOW=8760 RES=0x00 SYN URGP=14133
>May 28 01:39:54 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7799 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:40:18 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7800 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:06 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7801 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:33 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8465 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:36 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8466 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:42 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8467 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:54 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8468 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:42:18 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8469 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:42:32 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=65 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=32770 DPT=53 LEN=45
>May 28 01:43:06 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8470 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>---------------------------------------------------------------------------
-
>---------------------------------------------------------
>
>Regards
>Azeem
> >From: <alexis@tpys.com.ar>
> >To: "azeem ahmad" <azeem484@hotmail.com>
> >CC: <netfilter@lists.netfilter.org>
> >Subject: RE: iptables and samba
> >Date: Thu, 27 May 2004 16:28:35 -0000
> >
> >it seems a name resolution issue.
> >
> >check if you're using WINS or DNS and make sure you're allowing those
>ports
> >in orden to resolve the names. and it will work just fine
> >
> >azeem ahmad <azeem484@hotmail.com> dijo:
> >
> > >
> > > no one out there could help me?
> > >
> > > >From: "azeem ahmad" <azeem484@hotmail.com>
> > > >To: netfilter@lists.netfilter.org
> > > >Subject: iptables and samba
> > > >Date: Sun, 23 May 2004 09:20:52 +0000
> > > >
> > > >hi
> > > >i m using the script below
> > >
> >
>
>---------------------------------------------------------------------------
> >----------------------------------------------------------
> > > >iptables -F
> > > >iptables -t nat -F
> > > >iptables -P INPUT DROP
> > > >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
> > > >
> > > >iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
> >8080
> > > >#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT
>--to-port
> >8080
> > > >
> > > >iptables -P FORWARD DROP
> > > >iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
> > > >
> > > >iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> > >
> >
>
>---------------------------------------------------------------------------
> >----------------------------------------------------------
> > > >
> > > >i have two shares on samba server "Soft and linux" in these shares
> >there
> > > >are many folders. whenever i run the above script and then i open the
> >share
> > > >it takes atleast 4 minutes to open the share. but it doesnt take
>time
> > > >while browsing inside share.
> > > >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
> > > >when i double click on soft it takes atleast 4 minutes but after that
> >when
> > > >i click on adobe then acrobat then acrobat6 it takes now time it just
> >brose
> > > >them normally. same problem is with the other share named linux.
> > > >but if i dont run this script then all shares work fine with no delay
> > > >
> > > >i dont know what is the udp port 80 for but i just saw its traffic on
> >my
> > > >network in iptraf so i included it in my script
> > > >
> > > >Regards
> > > >Azeem
> > > >
> > > >_________________________________________________________________
> > > >Add photos to your e-mail with MSN 8. Get 2 months FREE*.
> > > >http://join.msn.com/?page=features/featuredemail
> > > >
> > > >
> > >
> > > _________________________________________________________________
> > > The new MSN 8: smart spam protection and 2 months FREE*
> > > http://join.msn.com/?page=features/junkmail
> > >
> > >
> > >
> >
> >
> >
> >--
> >
> >
> >
>
>_________________________________________________________________
>Help STOP SPAM with the new MSN 8 and get 2 months FREE*
>http://join.msn.com/?page=features/junkmail
>
>
>
>Visit our website at http://www.p21.com/visit
>The information in this e-mail is confidential and may contain legally
>privileged information. It is intended solely for the person or entity to
>which it is addressed. Access to this e-mail by anyone else is
>unauthorized. If you are not the intended recipient, any disclosure,
>copying, distribution, action taken, or action omitted to be taken in
>reliance on it, is prohibited and may be unlawful. If you received this
>e-mail in error, please contact the sender and delete the material from any
>computer.
>
>
>
_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail
Visit our website at http://www.p21.com/visit
The information in this e-mail is confidential and may contain legally
privileged information. It is intended solely for the person or entity to
which it is addressed. Access to this e-mail by anyone else is
unauthorized. If you are not the intended recipient, any disclosure,
copying, distribution, action taken, or action omitted to be taken in
reliance on it, is prohibited and may be unlawful. If you received this
e-mail in error, please contact the sender and delete the material from any
computer.
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: iptables and samba
@ 2004-05-28 19:32 azeem ahmad
0 siblings, 0 replies; 11+ messages in thread
From: azeem ahmad @ 2004-05-28 19:32 UTC (permalink / raw)
To: netfilter
the output of tcpdump that i have posted i last message is the output of the
command
#tcpdump -i eth0 host 192.168.0.2
and i only have one internal interface eth0 and one extrnal interface ppp0
Regards
Azeem
>From: Aldo Lagana <ALagana@p21.com>
>To: 'azeem ahmad' <azeem484@hotmail.com>, netfilter@lists.netfilter.org
>Subject: RE: iptables and samba
>Date: Thu, 27 May 2004 17:07:19 -0400
>
>tcpdump individually on the interfaces that the routing is going through
>while you attempt to 'browse' or whatever.
>You should see packets coming into your input interface but maybe NOT going
>out the output interface?!?
>
># tcpdump -i eth0 > /home/eth0.log &
># tcpdump -i eth1 > /home/eth1.log &
>
>(dont forget to kill both processes when done!)
>
>-----Original Message-----
>From: azeem ahmad [mailto:azeem484@hotmail.com]
>Sent: Thursday, May 27, 2004 4:57 PM
>To: netfilter@lists.netfilter.org
>Subject: RE: iptables and samba
>
>
>
>
>neither WINS nor DNS is on my network. only a caching only name server i m
>running. and i captured the output of /var/log/messages and that is as
>below
>and i added rules for port udp 137,139,139 and tcp 137,138,139 mean all
>three ports of both protocols but it doesnt seem to work
>
>----------------------------------------------------------------------------
>--------------------------------------------------
>May 28 01:36:27 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51870 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1024
>May 28 01:36:32 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51873 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1280
>May 28 01:36:38 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51878 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1536
>May 28 01:36:43 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51879 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1792
>May 28 01:36:57 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=51 TOS=0x00 PREC=0x00 TTL=128 ID=51886 PROTO=UDP
>SPT=8167 DPT=8167 LEN=31
>May 28 01:36:59 subzero samba(pam_unix)[2284]: session closed for user
>azeem
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=81 TOS=0x00 PREC=0x00 TTL=128 ID=32 PROTO=UDP
>SPT=8167 DPT=8167 LEN=61
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=33 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=35 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:29 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=43 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:59 subzero samba(pam_unix)[2552]: session opened for user must
>by (uid=0)
>May 28 01:39:33 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7796 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:36 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7797 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:42 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7798 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:50 subzero kernel: IN=ppp0 OUT= MAC= SRC=202.124.201.161
>DST=202.124.192.166 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=38996 DF PROTO=TCP
>SPT=4811 DPT=2745 WINDOW=8760 RES=0x00 SYN URGP=14133
>May 28 01:39:54 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7799 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:40:18 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7800 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:06 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7801 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:33 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8465 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:36 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8466 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:42 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8467 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:54 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8468 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:42:18 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8469 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:42:32 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=65 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=32770 DPT=53 LEN=45
>May 28 01:43:06 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8470 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>----------------------------------------------------------------------------
>---------------------------------------------------------
>
>Regards
>Azeem
> >From: <alexis@tpys.com.ar>
> >To: "azeem ahmad" <azeem484@hotmail.com>
> >CC: <netfilter@lists.netfilter.org>
> >Subject: RE: iptables and samba
> >Date: Thu, 27 May 2004 16:28:35 -0000
> >
> >it seems a name resolution issue.
> >
> >check if you're using WINS or DNS and make sure you're allowing those
>ports
> >in orden to resolve the names. and it will work just fine
> >
> >azeem ahmad <azeem484@hotmail.com> dijo:
> >
> > >
> > > no one out there could help me?
> > >
> > > >From: "azeem ahmad" <azeem484@hotmail.com>
> > > >To: netfilter@lists.netfilter.org
> > > >Subject: iptables and samba
> > > >Date: Sun, 23 May 2004 09:20:52 +0000
> > > >
> > > >hi
> > > >i m using the script below
> > >
> >
> >---------------------------------------------------------------------------
> >----------------------------------------------------------
> > > >iptables -F
> > > >iptables -t nat -F
> > > >iptables -P INPUT DROP
> > > >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
> > > >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
> > > >
> > > >iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
> >8080
> > > >#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT
>--to-port
> >8080
> > > >
> > > >iptables -P FORWARD DROP
> > > >iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
> > > >iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
> > > >
> > > >iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> > >
> >
> >---------------------------------------------------------------------------
> >----------------------------------------------------------
> > > >
> > > >i have two shares on samba server "Soft and linux" in these shares
> >there
> > > >are many folders. whenever i run the above script and then i open the
> >share
> > > >it takes atleast 4 minutes to open the share. but it doesnt take
>time
> > > >while browsing inside share.
> > > >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
> > > >when i double click on soft it takes atleast 4 minutes but after that
> >when
> > > >i click on adobe then acrobat then acrobat6 it takes now time it just
> >brose
> > > >them normally. same problem is with the other share named linux.
> > > >but if i dont run this script then all shares work fine with no delay
> > > >
> > > >i dont know what is the udp port 80 for but i just saw its traffic on
> >my
> > > >network in iptraf so i included it in my script
> > > >
> > > >Regards
> > > >Azeem
> > > >
> > > >_________________________________________________________________
> > > >Add photos to your e-mail with MSN 8. Get 2 months FREE*.
> > > >http://join.msn.com/?page=features/featuredemail
> > > >
> > > >
> > >
> > > _________________________________________________________________
> > > The new MSN 8: smart spam protection and 2 months FREE*
> > > http://join.msn.com/?page=features/junkmail
> > >
> > >
> > >
> >
> >
> >
> >--
> >
> >
> >
>
>_________________________________________________________________
>Help STOP SPAM with the new MSN 8 and get 2 months FREE*
>http://join.msn.com/?page=features/junkmail
>
>
>
>Visit our website at http://www.p21.com/visit
>The information in this e-mail is confidential and may contain legally
>privileged information. It is intended solely for the person or entity to
>which it is addressed. Access to this e-mail by anyone else is
>unauthorized. If you are not the intended recipient, any disclosure,
>copying, distribution, action taken, or action omitted to be taken in
>reliance on it, is prohibited and may be unlawful. If you received this
>e-mail in error, please contact the sender and delete the material from any
>computer.
>
>
>
_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: iptables and samba
@ 2004-05-27 21:35 azeem ahmad
0 siblings, 0 replies; 11+ messages in thread
From: azeem ahmad @ 2004-05-27 21:35 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 10581 bytes --]
i captured the output of tcpdump but it becomes a file with many entries so
i attached it here with. please check it.
and note that the problem only occurs one time. the first time when i open
the share it takes 4 minutes after that if i close share and then open it it
doesnt take time. but if i restart my client computer then it takes time
when connecting to share first time
Regards
Azeem
>From: "azeem ahmad" <azeem484@hotmail.com>
>To: netfilter@lists.netfilter.org
>Subject: RE: iptables and samba
>Date: Thu, 27 May 2004 20:56:37 +0000
>
>
>
>neither WINS nor DNS is on my network. only a caching only name server i m
>running. and i captured the output of /var/log/messages and that is as
>below
>and i added rules for port udp 137,139,139 and tcp 137,138,139 mean all
>three ports of both protocols but it doesnt seem to work
>
>------------------------------------------------------------------------------------------------------------------------------
>May 28 01:36:27 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51870 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1024
>May 28 01:36:32 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51873 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1280
>May 28 01:36:38 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51878 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1536
>May 28 01:36:43 subzero kernel: IN=eth0 OUT=
>MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51879 PROTO=ICMP
>TYPE=8 CODE=0 ID=512 SEQ=1792
>May 28 01:36:57 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=51 TOS=0x00 PREC=0x00 TTL=128 ID=51886 PROTO=UDP
>SPT=8167 DPT=8167 LEN=31
>May 28 01:36:59 subzero samba(pam_unix)[2284]: session closed for user
>azeem
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=81 TOS=0x00 PREC=0x00 TTL=128 ID=32 PROTO=UDP
>SPT=8167 DPT=8167 LEN=61
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=33 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:09 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=35 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:29 subzero kernel: IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
>DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=43 PROTO=UDP
>SPT=8167 DPT=8167 LEN=25
>May 28 01:38:59 subzero samba(pam_unix)[2552]: session opened for user must
>by (uid=0)
>May 28 01:39:33 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7796 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:36 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7797 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:42 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7798 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:39:50 subzero kernel: IN=ppp0 OUT= MAC= SRC=202.124.201.161
>DST=202.124.192.166 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=38996 DF PROTO=TCP
>SPT=4811 DPT=2745 WINDOW=8760 RES=0x00 SYN URGP=14133
>May 28 01:39:54 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7799 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:40:18 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7800 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:06 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7801 DF PROTO=TCP SPT=35625 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:33 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8465 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:36 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8466 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:42 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8467 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:41:54 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8468 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:42:18 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8469 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>May 28 01:42:32 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=65 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=32770 DPT=53 LEN=45
>May 28 01:43:06 subzero kernel: IN=lo OUT=
>MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
>LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8470 DF PROTO=TCP SPT=35699 DPT=80
>WINDOW=32767 RES=0x00 SYN URGP=0
>-------------------------------------------------------------------------------------------------------------------------------------
>
>Regards
>Azeem
>>From: <alexis@tpys.com.ar>
>>To: "azeem ahmad" <azeem484@hotmail.com>
>>CC: <netfilter@lists.netfilter.org>
>>Subject: RE: iptables and samba
>>Date: Thu, 27 May 2004 16:28:35 -0000
>>
>>it seems a name resolution issue.
>>
>>check if you're using WINS or DNS and make sure you're allowing those
>>ports
>>in orden to resolve the names. and it will work just fine
>>
>>azeem ahmad <azeem484@hotmail.com> dijo:
>>
>> >
>> > no one out there could help me?
>> >
>> > >From: "azeem ahmad" <azeem484@hotmail.com>
>> > >To: netfilter@lists.netfilter.org
>> > >Subject: iptables and samba
>> > >Date: Sun, 23 May 2004 09:20:52 +0000
>> > >
>> > >hi
>> > >i m using the script below
>> >
>> >---------------------------------------------------------------------------
>>----------------------------------------------------------
>> > >iptables -F
>> > >iptables -t nat -F
>> > >iptables -P INPUT DROP
>> > >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
>> > >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
>> > >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
>> > >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
>> > >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
>> > >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
>> > >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
>> > >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
>> > >
>> > >iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
>>8080
>> > >#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port
>>8080
>> > >
>> > >iptables -P FORWARD DROP
>> > >iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
>> > >iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
>> > >
>> > >iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
>> >
>> >---------------------------------------------------------------------------
>>----------------------------------------------------------
>> > >
>> > >i have two shares on samba server "Soft and linux" in these shares
>>there
>> > >are many folders. whenever i run the above script and then i open the
>>share
>> > >it takes atleast 4 minutes to open the share. but it doesnt take time
>> > >while browsing inside share.
>> > >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
>> > >when i double click on soft it takes atleast 4 minutes but after that
>>when
>> > >i click on adobe then acrobat then acrobat6 it takes now time it just
>>brose
>> > >them normally. same problem is with the other share named linux.
>> > >but if i dont run this script then all shares work fine with no delay
>> > >
>> > >i dont know what is the udp port 80 for but i just saw its traffic on
>>my
>> > >network in iptraf so i included it in my script
>> > >
>> > >Regards
>> > >Azeem
>> > >
>> > >_________________________________________________________________
>> > >Add photos to your e-mail with MSN 8. Get 2 months FREE*.
>> > >http://join.msn.com/?page=features/featuredemail
>> > >
>> > >
>> >
>> > _________________________________________________________________
>> > The new MSN 8: smart spam protection and 2 months FREE*
>> > http://join.msn.com/?page=features/junkmail
>> >
>> >
>> >
>>
>>
>>
>>--
>>
>>
>>
>
>_________________________________________________________________
>Help STOP SPAM with the new MSN 8 and get 2 months FREE*
>http://join.msn.com/?page=features/junkmail
>
>
_________________________________________________________________
Tired of spam? Get advanced junk mail protection with MSN 8.
http://join.msn.com/?page=features/junkmail
[-- Attachment #2: eth0.log --]
[-- Type: application/octet-stream, Size: 80940 bytes --]
02:24:15.074475 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1094943307:1094943386(79) ack 1183197890 win 63355 NBT Packet (DF)
02:24:15.074827 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 1:105(104) ack 79 win 5840 NBT Packet (DF)
02:24:15.075690 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 79:166(87) ack 105 win 63251 NBT Packet (DF)
02:24:15.076999 192.168.0.100.netbios-ssn > 192.168.0.2.1049: . 105:1565(1460) ack 166 win 5840 NBT Packet (DF)
02:24:15.077030 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 1565:2273(708) ack 166 win 5840 NBT Packet (DF)
02:24:15.077426 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: . ack 2273 win 64240 (DF)
02:24:15.137422 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 166:257(91) ack 2273 win 64240 NBT Packet (DF)
02:24:15.137660 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2273:2312(39) ack 257 win 5840 NBT Packet (DF)
02:24:15.139632 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 257:345(88) ack 2312 win 64201 NBT Packet (DF)
02:24:15.139760 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2312:2419(107) ack 345 win 5840 NBT Packet (DF)
02:24:15.140030 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 345:433(88) ack 2419 win 64094 NBT Packet (DF)
02:24:15.179417 192.168.0.100.netbios-ssn > 192.168.0.2.1049: . ack 433 win 5840 (DF)
02:24:15.181245 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 433:473(40) ack 2419 win 64094 NBT Packet (DF)
02:24:15.181301 192.168.0.100.netbios-ssn > 192.168.0.2.1049: . ack 473 win 5840 (DF)
02:24:15.181362 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2419:2494(75) ack 473 win 5840 NBT Packet (DF)
02:24:15.231304 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 473:518(45) ack 2494 win 64019 NBT Packet (DF)
02:24:15.231471 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2494:2533(39) ack 518 win 5840 NBT Packet (DF)
02:24:15.416188 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: . ack 2533 win 63980 (DF)
02:24:15.765963 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 518:613(95) ack 2533 win 63980 NBT Packet (DF)
02:24:15.766179 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2533:2640(107) ack 613 win 5840 NBT Packet (DF)
02:24:15.767227 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 613:753(140) ack 2640 win 63873 NBT Packet (DF)
02:24:15.767375 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2640:2691(51) ack 753 win 5840 NBT Packet (DF)
02:24:15.767713 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 753:816(63) ack 2691 win 63822 NBT Packet (DF)
02:24:15.767789 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2691:2822(131) ack 816 win 5840 NBT Packet (DF)
02:24:15.768163 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 816:984(168) ack 2822 win 63691 NBT Packet (DF)
02:24:15.768397 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 2822:3302(480) ack 984 win 5840 NBT Packet (DF)
02:24:15.768857 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 984:1029(45) ack 3302 win 63211 NBT Packet (DF)
02:24:15.768955 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3302:3341(39) ack 1029 win 5840 NBT Packet (DF)
02:24:15.770832 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1029:1125(96) ack 3341 win 63172 NBT Packet (DF)
02:24:15.770931 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3341:3448(107) ack 1125 win 5840 NBT Packet (DF)
02:24:15.771360 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1125:1265(140) ack 3448 win 63065 NBT Packet (DF)
02:24:15.771499 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3448:3499(51) ack 1265 win 5840 NBT Packet (DF)
02:24:15.771802 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1265:1328(63) ack 3499 win 63014 NBT Packet (DF)
02:24:15.771870 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3499:3630(131) ack 1328 win 5840 NBT Packet (DF)
02:24:15.772237 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1328:1578(250) ack 3630 win 62883 NBT Packet (DF)
02:24:15.772431 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3630:3738(108) ack 1578 win 5840 NBT Packet (DF)
02:24:15.772988 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1578:1702(124) ack 3738 win 64240 NBT Packet (DF)
02:24:15.773101 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3738:3846(108) ack 1702 win 5840 NBT Packet (DF)
02:24:15.773461 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1702:1747(45) ack 3846 win 64132 NBT Packet (DF)
02:24:15.773567 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3846:3885(39) ack 1747 win 5840 NBT Packet (DF)
02:24:15.776869 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1747:1842(95) ack 3885 win 64093 NBT Packet (DF)
02:24:15.776958 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3885:3992(107) ack 1842 win 5840 NBT Packet (DF)
02:24:15.777367 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1842:1982(140) ack 3992 win 63986 NBT Packet (DF)
02:24:15.777472 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 3992:4043(51) ack 1982 win 5840 NBT Packet (DF)
02:24:15.777786 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 1982:2045(63) ack 4043 win 63935 NBT Packet (DF)
02:24:15.777854 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 4043:4174(131) ack 2045 win 5840 NBT Packet (DF)
02:24:15.778223 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 2045:2189(144) ack 4174 win 63804 NBT Packet (DF)
02:24:15.778361 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 4174:4346(172) ack 2189 win 5840 NBT Packet (DF)
02:24:15.778744 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 2189:2234(45) ack 4346 win 63632 NBT Packet (DF)
02:24:15.778823 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 4346:4385(39) ack 2234 win 5840 NBT Packet (DF)
02:24:15.779562 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 2234:2329(95) ack 4385 win 63593 NBT Packet (DF)
02:24:15.779649 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 4385:4492(107) ack 2329 win 5840 NBT Packet (DF)
02:24:15.780056 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 2329:2469(140) ack 4492 win 63486 NBT Packet (DF)
02:24:15.780157 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 4492:4543(51) ack 2469 win 5840 NBT Packet (DF)
02:24:15.780464 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 2469:2532(63) ack 4543 win 63435 NBT Packet (DF)
02:24:15.780535 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 4543:4674(131) ack 2532 win 5840 NBT Packet (DF)
02:24:15.780899 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 2532:2676(144) ack 4674 win 63304 NBT Packet (DF)
02:24:27.118379 arp who-has 192.168.0.3 tell 192.168.0.2
02:24:27.118470 arp who-has 192.168.0.104 tell 192.168.0.2
02:24:27.118550 arp who-has 192.168.0.106 tell 192.168.0.2
02:24:27.227691 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 4809:4848(39) ack 6825 win 64240 NBT Packet (DF)
02:24:27.227973 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 6825:6864(39) ack 4848 win 5840 NBT Packet (DF)
02:24:27.228190 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 4848:4891(43) ack 6864 win 64201 NBT Packet (DF)
02:24:27.228286 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 6864:6907(43) ack 4891 win 5840 NBT Packet (DF)
02:24:27.228445 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 4891:4930(39) ack 6907 win 64158 NBT Packet (DF)
02:24:27.228585 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 6907:6946(39) ack 4930 win 5840 NBT Packet (DF)
02:24:27.228825 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 4930:4969(39) ack 6946 win 64119 NBT Packet (DF)
02:24:27.228966 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 6946:6985(39) ack 4969 win 5840 NBT Packet (DF)
02:24:27.336981 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: . ack 6985 win 64080 (DF)
02:25:27.219632 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 6985:6989(4) ack 4969 win 5840 NBT Packet (DF)
02:25:27.378459 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: . ack 6989 win 64076 (DF)
02:26:15.374488 192.168.0.2.netbios-dgm > 192.168.0.255.netbios-dgm: NBT UDP PACKET(138)
02:27:27.102337 arp who-has 192.168.0.106 tell 192.168.0.2
02:27:27.102604 arp who-has 192.168.0.2 tell 192.168.0.104
02:27:27.102668 arp who-has 192.168.0.2 tell 192.168.0.3
02:28:16.040233 192.168.0.100.http > 192.168.0.2.1051: P 1530968342:1530969707(1365) ack 1170101419 win 6432 (DF)
02:28:16.040833 arp who-has 192.168.0.100 tell 192.168.0.2
02:28:16.040904 arp reply 192.168.0.100 is-at 0:b0:d0:3d:84:1f
02:28:16.041012 192.168.0.2.1051 > 192.168.0.100.http: R 1170101419:1170101419(0) win 0 (DF)
02:28:16.041448 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 4969:5039(70) ack 6989 win 64076 NBT Packet (DF)
02:28:16.042265 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 6989:7042(53) ack 5039 win 5840 NBT Packet (DF)
02:28:16.042602 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5039:5118(79) ack 7042 win 64023 NBT Packet (DF)
02:28:16.042778 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 7042:7146(104) ack 5118 win 5840 NBT Packet (DF)
02:28:16.043143 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5118:5205(87) ack 7146 win 63919 NBT Packet (DF)
02:28:16.043436 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 7146:7610(464) ack 5205 win 5840 NBT Packet (DF)
02:28:16.088836 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5205:5296(91) ack 7610 win 63455 NBT Packet (DF)
02:28:16.088990 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 7610:7649(39) ack 5296 win 5840 NBT Packet (DF)
02:28:16.091326 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5296:5384(88) ack 7649 win 63416 NBT Packet (DF)
02:28:16.091432 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 7649:7756(107) ack 5384 win 5840 NBT Packet (DF)
02:28:16.091720 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5384:5472(88) ack 7756 win 63309 NBT Packet (DF)
02:28:16.129413 192.168.0.100.netbios-ssn > 192.168.0.2.1049: . ack 5472 win 5840 (DF)
02:28:17.162986 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5472:5624(152) ack 7756 win 63309 NBT Packet (DF)
02:28:17.163027 192.168.0.100.netbios-ssn > 192.168.0.2.1049: . ack 5624 win 5840 (DF)
02:28:17.164236 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 7756:7845(89) ack 5624 win 5840 NBT Packet (DF)
02:28:17.166234 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5624:5698(74) ack 7845 win 63220 NBT Packet (DF)
02:28:17.166894 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 7845:7929(84) ack 5698 win 5840 NBT Packet (DF)
02:28:17.167377 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5698:5782(84) ack 7929 win 63136 NBT Packet (DF)
02:28:17.167532 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 7929:8033(104) ack 5782 win 5840 NBT Packet (DF)
02:28:17.167920 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5782:5874(92) ack 8033 win 63032 NBT Packet (DF)
02:28:17.180814 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 8033:9129(1096) ack 5874 win 5840 NBT Packet (DF)
02:28:17.183475 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5874:5967(93) ack 9129 win 64240 NBT Packet (DF)
02:28:17.183668 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9129:9236(107) ack 5967 win 5840 NBT Packet (DF)
02:28:17.184042 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 5967:6041(74) ack 9236 win 64133 NBT Packet (DF)
02:28:17.184139 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9236:9324(88) ack 6041 win 5840 NBT Packet (DF)
02:28:17.184400 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6041:6117(76) ack 9324 win 64045 NBT Packet (DF)
02:28:17.184507 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9324:9428(104) ack 6117 win 5840 NBT Packet (DF)
02:28:17.184744 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6117:6193(76) ack 9428 win 63941 NBT Packet (DF)
02:28:17.184837 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9428:9516(88) ack 6193 win 5840 NBT Packet (DF)
02:28:17.185051 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6193:6269(76) ack 9516 win 63853 NBT Packet (DF)
02:28:17.185141 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9516:9588(72) ack 6269 win 5840 NBT Packet (DF)
02:28:17.185345 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6269:6345(76) ack 9588 win 63781 NBT Packet (DF)
02:28:17.185436 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9588:9656(68) ack 6345 win 5840 NBT Packet (DF)
02:28:17.185826 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6345:6483(138) ack 9656 win 63713 NBT Packet (DF)
02:28:17.185895 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9656:9695(39) ack 6483 win 5840 NBT Packet (DF)
02:28:17.186245 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6483:6528(45) ack 9695 win 63674 NBT Packet (DF)
02:28:17.186311 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9695:9734(39) ack 6528 win 5840 NBT Packet (DF)
02:28:17.186736 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6528:6621(93) ack 9734 win 63635 NBT Packet (DF)
02:28:17.186869 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9734:9841(107) ack 6621 win 5840 NBT Packet (DF)
02:28:17.187248 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6621:6697(76) ack 9841 win 63528 NBT Packet (DF)
02:28:17.187350 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9841:9945(104) ack 6697 win 5840 NBT Packet (DF)
02:28:17.187577 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6697:6773(76) ack 9945 win 63424 NBT Packet (DF)
02:28:17.187668 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 9945:10033(88) ack 6773 win 5840 NBT Packet (DF)
02:28:17.187891 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6773:6849(76) ack 10033 win 63336 NBT Packet (DF)
02:28:17.187981 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10033:10105(72) ack 6849 win 5840 NBT Packet (DF)
02:28:17.188192 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6849:6925(76) ack 10105 win 63264 NBT Packet (DF)
02:28:17.188282 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10105:10173(68) ack 6925 win 5840 NBT Packet (DF)
02:28:17.188656 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 6925:7063(138) ack 10173 win 63196 NBT Packet (DF)
02:28:17.188723 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10173:10212(39) ack 7063 win 5840 NBT Packet (DF)
02:28:17.189077 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7063:7108(45) ack 10212 win 63157 NBT Packet (DF)
02:28:17.189140 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10212:10251(39) ack 7108 win 5840 NBT Packet (DF)
02:28:17.189573 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7108:7201(93) ack 10251 win 63118 NBT Packet (DF)
02:28:17.189706 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10251:10358(107) ack 7201 win 5840 NBT Packet (DF)
02:28:17.190074 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7201:7277(76) ack 10358 win 63011 NBT Packet (DF)
02:28:17.190174 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10358:10462(104) ack 7277 win 5840 NBT Packet (DF)
02:28:17.190404 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7277:7353(76) ack 10462 win 62907 NBT Packet (DF)
02:28:17.190495 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10462:10550(88) ack 7353 win 5840 NBT Packet (DF)
02:28:17.190710 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7353:7429(76) ack 10550 win 62819 NBT Packet (DF)
02:28:17.190804 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10550:10622(72) ack 7429 win 5840 NBT Packet (DF)
02:28:17.191016 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7429:7505(76) ack 10622 win 64240 NBT Packet (DF)
02:28:17.191106 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10622:10690(68) ack 7505 win 5840 NBT Packet (DF)
02:28:17.191497 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7505:7643(138) ack 10690 win 64172 NBT Packet (DF)
02:28:17.191565 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10690:10729(39) ack 7643 win 5840 NBT Packet (DF)
02:28:17.191922 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7643:7688(45) ack 10729 win 64133 NBT Packet (DF)
02:28:17.191986 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10729:10768(39) ack 7688 win 5840 NBT Packet (DF)
02:28:17.192406 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7688:7781(93) ack 10768 win 64094 NBT Packet (DF)
02:28:17.192537 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10768:10875(107) ack 7781 win 5840 NBT Packet (DF)
02:28:17.192910 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7781:7857(76) ack 10875 win 63987 NBT Packet (DF)
02:28:17.193012 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10875:10979(104) ack 7857 win 5840 NBT Packet (DF)
02:28:17.193258 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7857:7933(76) ack 10979 win 63883 NBT Packet (DF)
02:28:17.193349 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 10979:11067(88) ack 7933 win 5840 NBT Packet (DF)
02:28:17.193574 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 7933:8009(76) ack 11067 win 63795 NBT Packet (DF)
02:28:17.193663 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11067:11139(72) ack 8009 win 5840 NBT Packet (DF)
02:28:17.193889 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8009:8085(76) ack 11139 win 63723 NBT Packet (DF)
02:28:17.193982 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11139:11207(68) ack 8085 win 5840 NBT Packet (DF)
02:28:17.194369 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8085:8223(138) ack 11207 win 63655 NBT Packet (DF)
02:28:17.194436 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11207:11246(39) ack 8223 win 5840 NBT Packet (DF)
02:28:17.194784 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8223:8268(45) ack 11246 win 63616 NBT Packet (DF)
02:28:17.194846 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11246:11285(39) ack 8268 win 5840 NBT Packet (DF)
02:28:17.195272 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8268:8361(93) ack 11285 win 63577 NBT Packet (DF)
02:28:17.195401 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11285:11392(107) ack 8361 win 5840 NBT Packet (DF)
02:28:17.195772 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8361:8437(76) ack 11392 win 63470 NBT Packet (DF)
02:28:17.195872 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11392:11496(104) ack 8437 win 5840 NBT Packet (DF)
02:28:17.196101 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8437:8513(76) ack 11496 win 63366 NBT Packet (DF)
02:28:17.196192 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11496:11584(88) ack 8513 win 5840 NBT Packet (DF)
02:28:17.196413 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8513:8589(76) ack 11584 win 63278 NBT Packet (DF)
02:28:17.196502 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11584:11656(72) ack 8589 win 5840 NBT Packet (DF)
02:28:17.196709 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8589:8665(76) ack 11656 win 63206 NBT Packet (DF)
02:28:17.196799 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11656:11724(68) ack 8665 win 5840 NBT Packet (DF)
02:28:17.197157 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8665:8803(138) ack 11724 win 63138 NBT Packet (DF)
02:28:17.197224 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11724:11763(39) ack 8803 win 5840 NBT Packet (DF)
02:28:17.197569 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8803:8848(45) ack 11763 win 63099 NBT Packet (DF)
02:28:17.197632 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11763:11802(39) ack 8848 win 5840 NBT Packet (DF)
02:28:17.198074 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8848:8941(93) ack 11802 win 63060 NBT Packet (DF)
02:28:17.198206 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11802:11909(107) ack 8941 win 5840 NBT Packet (DF)
02:28:17.198581 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 8941:9017(76) ack 11909 win 62953 NBT Packet (DF)
02:28:17.198682 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 11909:12013(104) ack 9017 win 5840 NBT Packet (DF)
02:28:17.198911 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9017:9093(76) ack 12013 win 62849 NBT Packet (DF)
02:28:17.199002 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12013:12101(88) ack 9093 win 5840 NBT Packet (DF)
02:28:17.199217 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9093:9169(76) ack 12101 win 64240 NBT Packet (DF)
02:28:17.199307 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12101:12173(72) ack 9169 win 5840 NBT Packet (DF)
02:28:17.199521 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9169:9245(76) ack 12173 win 64168 NBT Packet (DF)
02:28:17.199613 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12173:12241(68) ack 9245 win 5840 NBT Packet (DF)
02:28:17.199986 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9245:9383(138) ack 12241 win 64100 NBT Packet (DF)
02:28:17.200054 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12241:12280(39) ack 9383 win 5840 NBT Packet (DF)
02:28:17.200417 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9383:9428(45) ack 12280 win 64061 NBT Packet (DF)
02:28:17.200481 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12280:12319(39) ack 9428 win 5840 NBT Packet (DF)
02:28:17.200901 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9428:9521(93) ack 12319 win 64022 NBT Packet (DF)
02:28:17.201041 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12319:12426(107) ack 9521 win 5840 NBT Packet (DF)
02:28:17.201418 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9521:9597(76) ack 12426 win 63915 NBT Packet (DF)
02:28:17.201519 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12426:12530(104) ack 9597 win 5840 NBT Packet (DF)
02:28:17.201764 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9597:9673(76) ack 12530 win 63811 NBT Packet (DF)
02:28:17.201855 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12530:12618(88) ack 9673 win 5840 NBT Packet (DF)
02:28:17.202075 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9673:9749(76) ack 12618 win 63723 NBT Packet (DF)
02:28:17.202164 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12618:12690(72) ack 9749 win 5840 NBT Packet (DF)
02:28:17.202371 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9749:9825(76) ack 12690 win 63651 NBT Packet (DF)
02:28:17.202462 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12690:12758(68) ack 9825 win 5840 NBT Packet (DF)
02:28:17.202842 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9825:9963(138) ack 12758 win 63583 NBT Packet (DF)
02:28:17.202908 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12758:12797(39) ack 9963 win 5840 NBT Packet (DF)
02:28:17.203269 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 9963:10008(45) ack 12797 win 63544 NBT Packet (DF)
02:28:17.203334 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12797:12836(39) ack 10008 win 5840 NBT Packet (DF)
02:28:17.203758 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10008:10101(93) ack 12836 win 63505 NBT Packet (DF)
02:28:17.203890 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12836:12943(107) ack 10101 win 5840 NBT Packet (DF)
02:28:17.204277 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10101:10177(76) ack 12943 win 63398 NBT Packet (DF)
02:28:17.204379 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 12943:13047(104) ack 10177 win 5840 NBT Packet (DF)
02:28:17.204607 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10177:10253(76) ack 13047 win 63294 NBT Packet (DF)
02:28:17.204699 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13047:13135(88) ack 10253 win 5840 NBT Packet (DF)
02:28:17.204924 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10253:10329(76) ack 13135 win 63206 NBT Packet (DF)
02:28:17.205015 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13135:13207(72) ack 10329 win 5840 NBT Packet (DF)
02:28:17.205222 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10329:10405(76) ack 13207 win 63134 NBT Packet (DF)
02:28:17.205312 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13207:13275(68) ack 10405 win 5840 NBT Packet (DF)
02:28:17.205684 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10405:10543(138) ack 13275 win 63066 NBT Packet (DF)
02:28:17.205750 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13275:13314(39) ack 10543 win 5840 NBT Packet (DF)
02:28:17.206105 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10543:10588(45) ack 13314 win 63027 NBT Packet (DF)
02:28:17.206168 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13314:13353(39) ack 10588 win 5840 NBT Packet (DF)
02:28:17.206598 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10588:10681(93) ack 13353 win 62988 NBT Packet (DF)
02:28:17.206728 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13353:13460(107) ack 10681 win 5840 NBT Packet (DF)
02:28:17.207183 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10681:10757(76) ack 13460 win 62881 NBT Packet (DF)
02:28:17.207283 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13460:13564(104) ack 10757 win 5840 NBT Packet (DF)
02:28:17.207514 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10757:10833(76) ack 13564 win 64240 NBT Packet (DF)
02:28:17.207605 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13564:13652(88) ack 10833 win 5840 NBT Packet (DF)
02:28:17.207818 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10833:10909(76) ack 13652 win 64152 NBT Packet (DF)
02:28:17.207908 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13652:13724(72) ack 10909 win 5840 NBT Packet (DF)
02:28:17.208117 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10909:10985(76) ack 13724 win 64080 NBT Packet (DF)
02:28:17.208207 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13724:13792(68) ack 10985 win 5840 NBT Packet (DF)
02:28:17.208578 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 10985:11123(138) ack 13792 win 64012 NBT Packet (DF)
02:28:17.208644 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13792:13831(39) ack 11123 win 5840 NBT Packet (DF)
02:28:17.208994 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11123:11168(45) ack 13831 win 63973 NBT Packet (DF)
02:28:17.209058 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13831:13870(39) ack 11168 win 5840 NBT Packet (DF)
02:28:17.209491 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11168:11261(93) ack 13870 win 63934 NBT Packet (DF)
02:28:17.209621 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13870:13977(107) ack 11261 win 5840 NBT Packet (DF)
02:28:17.209989 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11261:11337(76) ack 13977 win 63827 NBT Packet (DF)
02:28:17.210088 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 13977:14081(104) ack 11337 win 5840 NBT Packet (DF)
02:28:17.210330 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11337:11413(76) ack 14081 win 63723 NBT Packet (DF)
02:28:17.210421 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14081:14169(88) ack 11413 win 5840 NBT Packet (DF)
02:28:17.210643 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11413:11489(76) ack 14169 win 63635 NBT Packet (DF)
02:28:17.210733 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14169:14241(72) ack 11489 win 5840 NBT Packet (DF)
02:28:17.210942 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11489:11565(76) ack 14241 win 63563 NBT Packet (DF)
02:28:17.211032 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14241:14309(68) ack 11565 win 5840 NBT Packet (DF)
02:28:17.211410 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11565:11703(138) ack 14309 win 63495 NBT Packet (DF)
02:28:17.211478 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14309:14348(39) ack 11703 win 5840 NBT Packet (DF)
02:28:17.211840 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11703:11748(45) ack 14348 win 63456 NBT Packet (DF)
02:28:17.211903 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14348:14387(39) ack 11748 win 5840 NBT Packet (DF)
02:28:17.212326 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11748:11841(93) ack 14387 win 63417 NBT Packet (DF)
02:28:17.212455 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14387:14494(107) ack 11841 win 5840 NBT Packet (DF)
02:28:17.212826 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11841:11917(76) ack 14494 win 63310 NBT Packet (DF)
02:28:17.212927 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14494:14598(104) ack 11917 win 5840 NBT Packet (DF)
02:28:17.213158 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11917:11993(76) ack 14598 win 63206 NBT Packet (DF)
02:28:17.213250 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14598:14686(88) ack 11993 win 5840 NBT Packet (DF)
02:28:17.213469 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 11993:12069(76) ack 14686 win 63118 NBT Packet (DF)
02:28:17.213558 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14686:14758(72) ack 12069 win 5840 NBT Packet (DF)
02:28:17.213759 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12069:12145(76) ack 14758 win 63046 NBT Packet (DF)
02:28:17.213849 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14758:14826(68) ack 12145 win 5840 NBT Packet (DF)
02:28:17.214238 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12145:12283(138) ack 14826 win 62978 NBT Packet (DF)
02:28:17.214306 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14826:14865(39) ack 12283 win 5840 NBT Packet (DF)
02:28:17.214658 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12283:12328(45) ack 14865 win 62939 NBT Packet (DF)
02:28:17.214722 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14865:14904(39) ack 12328 win 5840 NBT Packet (DF)
02:28:17.215147 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12328:12421(93) ack 14904 win 62900 NBT Packet (DF)
02:28:17.215276 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 14904:15011(107) ack 12421 win 5840 NBT Packet (DF)
02:28:17.215647 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12421:12497(76) ack 15011 win 62793 NBT Packet (DF)
02:28:17.215750 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15011:15115(104) ack 12497 win 5840 NBT Packet (DF)
02:28:17.215986 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12497:12573(76) ack 15115 win 64240 NBT Packet (DF)
02:28:17.216077 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15115:15203(88) ack 12573 win 5840 NBT Packet (DF)
02:28:17.216292 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12573:12649(76) ack 15203 win 64152 NBT Packet (DF)
02:28:17.216382 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15203:15275(72) ack 12649 win 5840 NBT Packet (DF)
02:28:17.216597 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12649:12725(76) ack 15275 win 64080 NBT Packet (DF)
02:28:17.216687 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15275:15343(68) ack 12725 win 5840 NBT Packet (DF)
02:28:17.217058 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12725:12863(138) ack 15343 win 64012 NBT Packet (DF)
02:28:17.217126 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15343:15382(39) ack 12863 win 5840 NBT Packet (DF)
02:28:17.217472 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12863:12908(45) ack 15382 win 63973 NBT Packet (DF)
02:28:17.217537 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15382:15421(39) ack 12908 win 5840 NBT Packet (DF)
02:28:17.217978 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 12908:13001(93) ack 15421 win 63934 NBT Packet (DF)
02:28:17.218108 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15421:15528(107) ack 13001 win 5840 NBT Packet (DF)
02:28:17.218478 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13001:13077(76) ack 15528 win 63827 NBT Packet (DF)
02:28:17.218579 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15528:15632(104) ack 13077 win 5840 NBT Packet (DF)
02:28:17.218824 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13077:13153(76) ack 15632 win 63723 NBT Packet (DF)
02:28:17.218915 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15632:15720(88) ack 13153 win 5840 NBT Packet (DF)
02:28:17.219130 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13153:13229(76) ack 15720 win 63635 NBT Packet (DF)
02:28:17.219220 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15720:15792(72) ack 13229 win 5840 NBT Packet (DF)
02:28:17.219427 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13229:13305(76) ack 15792 win 63563 NBT Packet (DF)
02:28:17.219719 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15792:15860(68) ack 13305 win 5840 NBT Packet (DF)
02:28:17.220094 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13305:13443(138) ack 15860 win 63495 NBT Packet (DF)
02:28:17.220196 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15860:15899(39) ack 13443 win 5840 NBT Packet (DF)
02:28:17.220544 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13443:13488(45) ack 15899 win 63456 NBT Packet (DF)
02:28:17.220644 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15899:15938(39) ack 13488 win 5840 NBT Packet (DF)
02:28:17.221059 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13488:13581(93) ack 15938 win 63417 NBT Packet (DF)
02:28:17.221291 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 15938:16045(107) ack 13581 win 5840 NBT Packet (DF)
02:28:17.221657 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13581:13657(76) ack 16045 win 63310 NBT Packet (DF)
02:28:17.221820 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16045:16149(104) ack 13657 win 5840 NBT Packet (DF)
02:28:17.222049 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13657:13733(76) ack 16149 win 63206 NBT Packet (DF)
02:28:17.222171 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16149:16237(88) ack 13733 win 5840 NBT Packet (DF)
02:28:17.222391 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13733:13809(76) ack 16237 win 63118 NBT Packet (DF)
02:28:17.222537 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16237:16309(72) ack 13809 win 5840 NBT Packet (DF)
02:28:17.222760 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13809:13885(76) ack 16309 win 63046 NBT Packet (DF)
02:28:17.222878 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16309:16377(68) ack 13885 win 5840 NBT Packet (DF)
02:28:17.223252 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 13885:14023(138) ack 16377 win 62978 NBT Packet (DF)
02:28:17.223360 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16377:16416(39) ack 14023 win 5840 NBT Packet (DF)
02:28:17.223721 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14023:14068(45) ack 16416 win 62939 NBT Packet (DF)
02:28:17.223818 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16416:16455(39) ack 14068 win 5840 NBT Packet (DF)
02:28:17.224241 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14068:14161(93) ack 16455 win 62900 NBT Packet (DF)
02:28:17.224431 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16455:16562(107) ack 14161 win 5840 NBT Packet (DF)
02:28:17.224800 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14161:14237(76) ack 16562 win 62793 NBT Packet (DF)
02:28:17.224936 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16562:16666(104) ack 14237 win 5840 NBT Packet (DF)
02:28:17.225161 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14237:14313(76) ack 16666 win 64240 NBT Packet (DF)
02:28:17.225310 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16666:16754(88) ack 14313 win 5840 NBT Packet (DF)
02:28:17.225517 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14313:14389(76) ack 16754 win 64152 NBT Packet (DF)
02:28:17.225637 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16754:16826(72) ack 14389 win 5840 NBT Packet (DF)
02:28:17.225847 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14389:14465(76) ack 16826 win 64080 NBT Packet (DF)
02:28:17.225966 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16826:16894(68) ack 14465 win 5840 NBT Packet (DF)
02:28:17.226343 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14465:14603(138) ack 16894 win 64012 NBT Packet (DF)
02:28:17.226439 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16894:16933(39) ack 14603 win 5840 NBT Packet (DF)
02:28:17.226780 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14603:14648(45) ack 16933 win 63973 NBT Packet (DF)
02:28:17.226875 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16933:16972(39) ack 14648 win 5840 NBT Packet (DF)
02:28:17.227286 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14648:14741(93) ack 16972 win 63934 NBT Packet (DF)
02:28:17.227458 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 16972:17079(107) ack 14741 win 5840 NBT Packet (DF)
02:28:17.227829 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14741:14817(76) ack 17079 win 63827 NBT Packet (DF)
02:28:17.227962 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17079:17183(104) ack 14817 win 5840 NBT Packet (DF)
02:28:17.228193 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14817:14893(76) ack 17183 win 63723 NBT Packet (DF)
02:28:17.228314 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17183:17271(88) ack 14893 win 5840 NBT Packet (DF)
02:28:17.228528 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14893:14969(76) ack 17271 win 63635 NBT Packet (DF)
02:28:17.228650 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17271:17343(72) ack 14969 win 5840 NBT Packet (DF)
02:28:17.228847 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 14969:15045(76) ack 17343 win 63563 NBT Packet (DF)
02:28:17.228966 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17343:17411(68) ack 15045 win 5840 NBT Packet (DF)
02:28:17.229335 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15045:15183(138) ack 17411 win 63495 NBT Packet (DF)
02:28:17.229457 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17411:17450(39) ack 15183 win 5840 NBT Packet (DF)
02:28:17.229800 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15183:15228(45) ack 17450 win 63456 NBT Packet (DF)
02:28:17.229896 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17450:17489(39) ack 15228 win 5840 NBT Packet (DF)
02:28:17.230307 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15228:15321(93) ack 17489 win 63417 NBT Packet (DF)
02:28:17.230484 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17489:17596(107) ack 15321 win 5840 NBT Packet (DF)
02:28:17.230843 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15321:15397(76) ack 17596 win 63310 NBT Packet (DF)
02:28:17.231087 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17596:17700(104) ack 15397 win 5840 NBT Packet (DF)
02:28:17.231312 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15397:15473(76) ack 17700 win 63206 NBT Packet (DF)
02:28:17.231434 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17700:17788(88) ack 15473 win 5840 NBT Packet (DF)
02:28:17.231652 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15473:15549(76) ack 17788 win 63118 NBT Packet (DF)
02:28:17.231773 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17788:17860(72) ack 15549 win 5840 NBT Packet (DF)
02:28:17.231974 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15549:15625(76) ack 17860 win 63046 NBT Packet (DF)
02:28:17.232094 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17860:17928(68) ack 15625 win 5840 NBT Packet (DF)
02:28:17.232461 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15625:15763(138) ack 17928 win 62978 NBT Packet (DF)
02:28:17.232557 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17928:17967(39) ack 15763 win 5840 NBT Packet (DF)
02:28:17.232918 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15763:15808(45) ack 17967 win 62939 NBT Packet (DF)
02:28:17.233027 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 17967:18006(39) ack 15808 win 5840 NBT Packet (DF)
02:28:17.233443 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15808:15901(93) ack 18006 win 62900 NBT Packet (DF)
02:28:17.233623 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18006:18113(107) ack 15901 win 5840 NBT Packet (DF)
02:28:17.233996 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15901:15977(76) ack 18113 win 62793 NBT Packet (DF)
02:28:17.234134 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18113:18217(104) ack 15977 win 5840 NBT Packet (DF)
02:28:17.234364 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 15977:16053(76) ack 18217 win 64240 NBT Packet (DF)
02:28:17.234484 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18217:18305(88) ack 16053 win 5840 NBT Packet (DF)
02:28:17.234693 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16053:16129(76) ack 18305 win 64152 NBT Packet (DF)
02:28:17.234812 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18305:18377(72) ack 16129 win 5840 NBT Packet (DF)
02:28:17.235020 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16129:16205(76) ack 18377 win 64080 NBT Packet (DF)
02:28:17.235140 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18377:18445(68) ack 16205 win 5840 NBT Packet (DF)
02:28:17.235521 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16205:16343(138) ack 18445 win 64012 NBT Packet (DF)
02:28:17.235615 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18445:18484(39) ack 16343 win 5840 NBT Packet (DF)
02:28:17.235958 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16343:16388(45) ack 18484 win 63973 NBT Packet (DF)
02:28:17.236052 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18484:18523(39) ack 16388 win 5840 NBT Packet (DF)
02:28:17.236473 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16388:16481(93) ack 18523 win 63934 NBT Packet (DF)
02:28:17.236642 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18523:18630(107) ack 16481 win 5840 NBT Packet (DF)
02:28:17.237008 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16481:16557(76) ack 18630 win 63827 NBT Packet (DF)
02:28:17.237140 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18630:18734(104) ack 16557 win 5840 NBT Packet (DF)
02:28:17.237376 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16557:16633(76) ack 18734 win 63723 NBT Packet (DF)
02:28:17.237497 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18734:18822(88) ack 16633 win 5840 NBT Packet (DF)
02:28:17.237724 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16633:16709(76) ack 18822 win 63635 NBT Packet (DF)
02:28:17.237844 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18822:18894(72) ack 16709 win 5840 NBT Packet (DF)
02:28:17.238044 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16709:16785(76) ack 18894 win 63563 NBT Packet (DF)
02:28:17.238163 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18894:18962(68) ack 16785 win 5840 NBT Packet (DF)
02:28:17.238537 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16785:16923(138) ack 18962 win 63495 NBT Packet (DF)
02:28:17.238726 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 18962:19001(39) ack 16923 win 5840 NBT Packet (DF)
02:28:17.239070 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16923:16968(45) ack 19001 win 63456 NBT Packet (DF)
02:28:17.239166 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19001:19040(39) ack 16968 win 5840 NBT Packet (DF)
02:28:17.239601 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 16968:17061(93) ack 19040 win 63417 NBT Packet (DF)
02:28:17.239788 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19040:19147(107) ack 17061 win 5840 NBT Packet (DF)
02:28:17.240156 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17061:17137(76) ack 19147 win 63310 NBT Packet (DF)
02:28:17.240292 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19147:19251(104) ack 17137 win 5840 NBT Packet (DF)
02:28:17.240518 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17137:17213(76) ack 19251 win 63206 NBT Packet (DF)
02:28:17.240639 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19251:19339(88) ack 17213 win 5840 NBT Packet (DF)
02:28:17.240854 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17213:17289(76) ack 19339 win 63118 NBT Packet (DF)
02:28:17.240973 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19339:19411(72) ack 17289 win 5840 NBT Packet (DF)
02:28:17.241170 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17289:17365(76) ack 19411 win 63046 NBT Packet (DF)
02:28:17.241288 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19411:19479(68) ack 17365 win 5840 NBT Packet (DF)
02:28:17.241656 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17365:17503(138) ack 19479 win 62978 NBT Packet (DF)
02:28:17.241751 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19479:19518(39) ack 17503 win 5840 NBT Packet (DF)
02:28:17.242097 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17503:17548(45) ack 19518 win 62939 NBT Packet (DF)
02:28:17.242191 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19518:19557(39) ack 17548 win 5840 NBT Packet (DF)
02:28:17.242622 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17548:17641(93) ack 19557 win 62900 NBT Packet (DF)
02:28:17.242795 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19557:19664(107) ack 17641 win 5840 NBT Packet (DF)
02:28:17.243161 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17641:17717(76) ack 19664 win 62793 NBT Packet (DF)
02:28:17.243295 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19664:19768(104) ack 17717 win 5840 NBT Packet (DF)
02:28:17.243522 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17717:17793(76) ack 19768 win 64240 NBT Packet (DF)
02:28:17.243671 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19768:19856(88) ack 17793 win 5840 NBT Packet (DF)
02:28:17.243878 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17793:17869(76) ack 19856 win 64152 NBT Packet (DF)
02:28:17.244000 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19856:19928(72) ack 17869 win 5840 NBT Packet (DF)
02:28:17.244206 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17869:17945(76) ack 19928 win 64080 NBT Packet (DF)
02:28:17.244325 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19928:19996(68) ack 17945 win 5840 NBT Packet (DF)
02:28:17.244698 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 17945:18083(138) ack 19996 win 64012 NBT Packet (DF)
02:28:17.244793 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 19996:20035(39) ack 18083 win 5840 NBT Packet (DF)
02:28:17.245146 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18083:18128(45) ack 20035 win 63973 NBT Packet (DF)
02:28:17.245241 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20035:20074(39) ack 18128 win 5840 NBT Packet (DF)
02:28:17.245651 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18128:18221(93) ack 20074 win 63934 NBT Packet (DF)
02:28:17.245822 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20074:20181(107) ack 18221 win 5840 NBT Packet (DF)
02:28:17.246189 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18221:18297(76) ack 20181 win 63827 NBT Packet (DF)
02:28:17.246323 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20181:20285(104) ack 18297 win 5840 NBT Packet (DF)
02:28:17.246551 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18297:18373(76) ack 20285 win 63723 NBT Packet (DF)
02:28:17.246695 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20285:20373(88) ack 18373 win 5840 NBT Packet (DF)
02:28:17.246907 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18373:18449(76) ack 20373 win 63635 NBT Packet (DF)
02:28:17.247027 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20373:20445(72) ack 18449 win 5840 NBT Packet (DF)
02:28:17.247223 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18449:18525(76) ack 20445 win 63563 NBT Packet (DF)
02:28:17.247342 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20445:20513(68) ack 18525 win 5840 NBT Packet (DF)
02:28:17.247727 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18525:18663(138) ack 20513 win 63495 NBT Packet (DF)
02:28:17.247823 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20513:20552(39) ack 18663 win 5840 NBT Packet (DF)
02:28:17.248166 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18663:18708(45) ack 20552 win 63456 NBT Packet (DF)
02:28:17.248261 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20552:20591(39) ack 18708 win 5840 NBT Packet (DF)
02:28:17.248681 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18708:18801(93) ack 20591 win 63417 NBT Packet (DF)
02:28:17.248858 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20591:20698(107) ack 18801 win 5840 NBT Packet (DF)
02:28:17.249236 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18801:18877(76) ack 20698 win 63310 NBT Packet (DF)
02:28:17.249370 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20698:20802(104) ack 18877 win 5840 NBT Packet (DF)
02:28:17.249591 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18877:18953(76) ack 20802 win 63206 NBT Packet (DF)
02:28:17.249713 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20802:20890(88) ack 18953 win 5840 NBT Packet (DF)
02:28:17.249930 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 18953:19029(76) ack 20890 win 63118 NBT Packet (DF)
02:28:17.250047 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20890:20962(72) ack 19029 win 5840 NBT Packet (DF)
02:28:17.250251 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19029:19105(76) ack 20962 win 63046 NBT Packet (DF)
02:28:17.250371 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 20962:21030(68) ack 19105 win 5840 NBT Packet (DF)
02:28:17.250745 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19105:19243(138) ack 21030 win 62978 NBT Packet (DF)
02:28:17.250852 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21030:21069(39) ack 19243 win 5840 NBT Packet (DF)
02:28:17.251202 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19243:19288(45) ack 21069 win 62939 NBT Packet (DF)
02:28:17.251296 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21069:21108(39) ack 19288 win 5840 NBT Packet (DF)
02:28:17.251732 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19288:19381(93) ack 21108 win 62900 NBT Packet (DF)
02:28:17.251906 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21108:21215(107) ack 19381 win 5840 NBT Packet (DF)
02:28:17.252275 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19381:19457(76) ack 21215 win 62793 NBT Packet (DF)
02:28:17.252405 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21215:21319(104) ack 19457 win 5840 NBT Packet (DF)
02:28:17.252627 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19457:19533(76) ack 21319 win 64240 NBT Packet (DF)
02:28:17.252747 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21319:21407(88) ack 19533 win 5840 NBT Packet (DF)
02:28:17.252959 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19533:19609(76) ack 21407 win 64152 NBT Packet (DF)
02:28:17.253079 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21407:21479(72) ack 19609 win 5840 NBT Packet (DF)
02:28:17.253284 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19609:19685(76) ack 21479 win 64080 NBT Packet (DF)
02:28:17.253403 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21479:21547(68) ack 19685 win 5840 NBT Packet (DF)
02:28:17.253765 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19685:19823(138) ack 21547 win 64012 NBT Packet (DF)
02:28:17.253949 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21547:21586(39) ack 19823 win 5840 NBT Packet (DF)
02:28:17.254311 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19823:19868(45) ack 21586 win 63973 NBT Packet (DF)
02:28:17.254408 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21586:21625(39) ack 19868 win 5840 NBT Packet (DF)
02:28:17.254830 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19868:19961(93) ack 21625 win 63934 NBT Packet (DF)
02:28:17.255012 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21625:21732(107) ack 19961 win 5840 NBT Packet (DF)
02:28:17.255384 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 19961:20037(76) ack 21732 win 63827 NBT Packet (DF)
02:28:17.255517 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21732:21836(104) ack 20037 win 5840 NBT Packet (DF)
02:28:17.255755 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20037:20113(76) ack 21836 win 63723 NBT Packet (DF)
02:28:17.255876 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21836:21924(88) ack 20113 win 5840 NBT Packet (DF)
02:28:17.256093 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20113:20189(76) ack 21924 win 63635 NBT Packet (DF)
02:28:17.256214 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21924:21996(72) ack 20189 win 5840 NBT Packet (DF)
02:28:17.256417 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20189:20265(76) ack 21996 win 63563 NBT Packet (DF)
02:28:17.256543 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 21996:22064(68) ack 20265 win 5840 NBT Packet (DF)
02:28:17.256916 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20265:20403(138) ack 22064 win 63495 NBT Packet (DF)
02:28:17.257011 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22064:22103(39) ack 20403 win 5840 NBT Packet (DF)
02:28:17.257368 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20403:20448(45) ack 22103 win 63456 NBT Packet (DF)
02:28:17.257461 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22103:22142(39) ack 20448 win 5840 NBT Packet (DF)
02:28:17.257877 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20448:20541(93) ack 22142 win 63417 NBT Packet (DF)
02:28:17.258049 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22142:22249(107) ack 20541 win 5840 NBT Packet (DF)
02:28:17.258412 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20541:20617(76) ack 22249 win 63310 NBT Packet (DF)
02:28:17.258546 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22249:22353(104) ack 20617 win 5840 NBT Packet (DF)
02:28:17.258768 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20617:20693(76) ack 22353 win 63206 NBT Packet (DF)
02:28:17.258888 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22353:22441(88) ack 20693 win 5840 NBT Packet (DF)
02:28:17.259106 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20693:20769(76) ack 22441 win 63118 NBT Packet (DF)
02:28:17.259226 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22441:22513(72) ack 20769 win 5840 NBT Packet (DF)
02:28:17.259433 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20769:20845(76) ack 22513 win 63046 NBT Packet (DF)
02:28:17.259598 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22513:22581(68) ack 20845 win 5840 NBT Packet (DF)
02:28:17.259965 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20845:20983(138) ack 22581 win 62978 NBT Packet (DF)
02:28:17.260079 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22581:22620(39) ack 20983 win 5840 NBT Packet (DF)
02:28:17.260429 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 20983:21028(45) ack 22620 win 62939 NBT Packet (DF)
02:28:17.260536 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22620:22659(39) ack 21028 win 5840 NBT Packet (DF)
02:28:17.260957 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21028:21121(93) ack 22659 win 62900 NBT Packet (DF)
02:28:17.261148 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22659:22766(107) ack 21121 win 5840 NBT Packet (DF)
02:28:17.261517 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21121:21197(76) ack 22766 win 62793 NBT Packet (DF)
02:28:17.261672 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22766:22870(104) ack 21197 win 5840 NBT Packet (DF)
02:28:17.261895 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21197:21273(76) ack 22870 win 64240 NBT Packet (DF)
02:28:17.262185 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22870:22958(88) ack 21273 win 5840 NBT Packet (DF)
02:28:17.262396 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21273:21349(76) ack 22958 win 64152 NBT Packet (DF)
02:28:17.262535 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 22958:23030(72) ack 21349 win 5840 NBT Packet (DF)
02:28:17.262741 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21349:21425(76) ack 23030 win 64080 NBT Packet (DF)
02:28:17.262874 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23030:23098(68) ack 21425 win 5840 NBT Packet (DF)
02:28:17.263225 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21425:21563(138) ack 23098 win 64012 NBT Packet (DF)
02:28:17.263351 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23098:23137(39) ack 21563 win 5840 NBT Packet (DF)
02:28:17.263685 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21563:21608(45) ack 23137 win 63973 NBT Packet (DF)
02:28:17.263789 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23137:23176(39) ack 21608 win 5840 NBT Packet (DF)
02:28:17.264216 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21608:21701(93) ack 23176 win 63934 NBT Packet (DF)
02:28:17.264415 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23176:23283(107) ack 21701 win 5840 NBT Packet (DF)
02:28:17.264780 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21701:21777(76) ack 23283 win 63827 NBT Packet (DF)
02:28:17.264935 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23283:23387(104) ack 21777 win 5840 NBT Packet (DF)
02:28:17.265172 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21777:21853(76) ack 23387 win 63723 NBT Packet (DF)
02:28:17.265309 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23387:23475(88) ack 21853 win 5840 NBT Packet (DF)
02:28:17.265526 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21853:21929(76) ack 23475 win 63635 NBT Packet (DF)
02:28:17.265660 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23475:23547(72) ack 21929 win 5840 NBT Packet (DF)
02:28:17.265859 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 21929:22005(76) ack 23547 win 63563 NBT Packet (DF)
02:28:17.265991 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23547:23615(68) ack 22005 win 5840 NBT Packet (DF)
02:28:17.266368 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22005:22143(138) ack 23615 win 63495 NBT Packet (DF)
02:28:17.266474 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23615:23654(39) ack 22143 win 5840 NBT Packet (DF)
02:28:17.266829 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22143:22188(45) ack 23654 win 63456 NBT Packet (DF)
02:28:17.266933 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23654:23693(39) ack 22188 win 5840 NBT Packet (DF)
02:28:17.267346 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22188:22281(93) ack 23693 win 63417 NBT Packet (DF)
02:28:17.267529 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23693:23800(107) ack 22281 win 5840 NBT Packet (DF)
02:28:17.267900 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22281:22357(76) ack 23800 win 63310 NBT Packet (DF)
02:28:17.268052 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23800:23904(104) ack 22357 win 5840 NBT Packet (DF)
02:28:17.268278 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22357:22433(76) ack 23904 win 63206 NBT Packet (DF)
02:28:17.268415 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23904:23992(88) ack 22433 win 5840 NBT Packet (DF)
02:28:17.268632 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22433:22509(76) ack 23992 win 63118 NBT Packet (DF)
02:28:17.268766 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 23992:24064(72) ack 22509 win 5840 NBT Packet (DF)
02:28:17.268967 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22509:22585(76) ack 24064 win 63046 NBT Packet (DF)
02:28:17.269101 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24064:24132(68) ack 22585 win 5840 NBT Packet (DF)
02:28:17.269497 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22585:22723(138) ack 24132 win 62978 NBT Packet (DF)
02:28:17.269610 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24132:24171(39) ack 22723 win 5840 NBT Packet (DF)
02:28:17.269959 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22723:22768(45) ack 24171 win 62939 NBT Packet (DF)
02:28:17.270081 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24171:24210(39) ack 22768 win 5840 NBT Packet (DF)
02:28:17.270501 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22768:22861(93) ack 24210 win 62900 NBT Packet (DF)
02:28:17.270703 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24210:24317(107) ack 22861 win 5840 NBT Packet (DF)
02:28:17.271078 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22861:22937(76) ack 24317 win 62793 NBT Packet (DF)
02:28:17.271235 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24317:24421(104) ack 22937 win 5840 NBT Packet (DF)
02:28:17.271458 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 22937:23013(76) ack 24421 win 64240 NBT Packet (DF)
02:28:17.271595 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24421:24509(88) ack 23013 win 5840 NBT Packet (DF)
02:28:17.271803 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23013:23089(76) ack 24509 win 64152 NBT Packet (DF)
02:28:17.271937 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24509:24581(72) ack 23089 win 5840 NBT Packet (DF)
02:28:17.272147 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23089:23165(76) ack 24581 win 64080 NBT Packet (DF)
02:28:17.272281 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24581:24649(68) ack 23165 win 5840 NBT Packet (DF)
02:28:17.272648 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23165:23303(138) ack 24649 win 64012 NBT Packet (DF)
02:28:17.272757 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24649:24688(39) ack 23303 win 5840 NBT Packet (DF)
02:28:17.273100 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23303:23348(45) ack 24688 win 63973 NBT Packet (DF)
02:28:17.273204 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24688:24727(39) ack 23348 win 5840 NBT Packet (DF)
02:28:17.273631 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23348:23441(93) ack 24727 win 63934 NBT Packet (DF)
02:28:17.273814 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24727:24834(107) ack 23441 win 5840 NBT Packet (DF)
02:28:17.274178 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23441:23517(76) ack 24834 win 63827 NBT Packet (DF)
02:28:17.274331 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24834:24938(104) ack 23517 win 5840 NBT Packet (DF)
02:28:17.274567 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23517:23593(76) ack 24938 win 63723 NBT Packet (DF)
02:28:17.274703 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 24938:25026(88) ack 23593 win 5840 NBT Packet (DF)
02:28:17.274921 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23593:23669(76) ack 25026 win 63635 NBT Packet (DF)
02:28:17.275054 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25026:25098(72) ack 23669 win 5840 NBT Packet (DF)
02:28:17.275253 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23669:23745(76) ack 25098 win 63563 NBT Packet (DF)
02:28:17.275387 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25098:25166(68) ack 23745 win 5840 NBT Packet (DF)
02:28:17.275760 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23745:23883(138) ack 25166 win 63495 NBT Packet (DF)
02:28:17.275868 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25166:25205(39) ack 23883 win 5840 NBT Packet (DF)
02:28:17.276228 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23883:23928(45) ack 25205 win 63456 NBT Packet (DF)
02:28:17.276331 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25205:25244(39) ack 23928 win 5840 NBT Packet (DF)
02:28:17.276747 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 23928:24021(93) ack 25244 win 63417 NBT Packet (DF)
02:28:17.276930 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25244:25351(107) ack 24021 win 5840 NBT Packet (DF)
02:28:17.277297 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24021:24097(76) ack 25351 win 63310 NBT Packet (DF)
02:28:17.277449 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25351:25455(104) ack 24097 win 5840 NBT Packet (DF)
02:28:17.277670 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24097:24173(76) ack 25455 win 63206 NBT Packet (DF)
02:28:17.277807 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25455:25543(88) ack 24173 win 5840 NBT Packet (DF)
02:28:17.278026 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24173:24249(76) ack 25543 win 63118 NBT Packet (DF)
02:28:17.278185 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25543:25615(72) ack 24249 win 5840 NBT Packet (DF)
02:28:17.278383 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24249:24325(76) ack 25615 win 63046 NBT Packet (DF)
02:28:17.278517 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25615:25683(68) ack 24325 win 5840 NBT Packet (DF)
02:28:17.278885 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24325:24463(138) ack 25683 win 62978 NBT Packet (DF)
02:28:17.278997 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25683:25722(39) ack 24463 win 5840 NBT Packet (DF)
02:28:17.279347 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24463:24508(45) ack 25722 win 62939 NBT Packet (DF)
02:28:17.279457 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25722:25761(39) ack 24508 win 5840 NBT Packet (DF)
02:28:17.279865 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24508:24601(93) ack 25761 win 62900 NBT Packet (DF)
02:28:17.280481 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25761:25868(107) ack 24601 win 5840 NBT Packet (DF)
02:28:17.280852 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24601:24677(76) ack 25868 win 62793 NBT Packet (DF)
02:28:17.281015 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25868:25972(104) ack 24677 win 5840 NBT Packet (DF)
02:28:17.281241 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24677:24753(76) ack 25972 win 64240 NBT Packet (DF)
02:28:17.281379 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 25972:26060(88) ack 24753 win 5840 NBT Packet (DF)
02:28:17.281586 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24753:24829(76) ack 26060 win 64152 NBT Packet (DF)
02:28:17.281720 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26060:26132(72) ack 24829 win 5840 NBT Packet (DF)
02:28:17.281928 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24829:24905(76) ack 26132 win 64080 NBT Packet (DF)
02:28:17.282062 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26132:26200(68) ack 24905 win 5840 NBT Packet (DF)
02:28:17.282428 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 24905:25043(138) ack 26200 win 64012 NBT Packet (DF)
02:28:17.282539 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26200:26239(39) ack 25043 win 5840 NBT Packet (DF)
02:28:17.282886 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25043:25088(45) ack 26239 win 63973 NBT Packet (DF)
02:28:17.283005 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26239:26278(39) ack 25088 win 5840 NBT Packet (DF)
02:28:17.283425 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25088:25181(93) ack 26278 win 63934 NBT Packet (DF)
02:28:17.283643 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26278:26385(107) ack 25181 win 5840 NBT Packet (DF)
02:28:17.284016 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25181:25257(76) ack 26385 win 63827 NBT Packet (DF)
02:28:17.284178 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26385:26489(104) ack 25257 win 5840 NBT Packet (DF)
02:28:17.284418 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25257:25333(76) ack 26489 win 63723 NBT Packet (DF)
02:28:17.284556 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26489:26577(88) ack 25333 win 5840 NBT Packet (DF)
02:28:17.284769 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25333:25409(76) ack 26577 win 63635 NBT Packet (DF)
02:28:17.284902 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26577:26649(72) ack 25409 win 5840 NBT Packet (DF)
02:28:17.285227 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25409:25485(76) ack 26649 win 63563 NBT Packet (DF)
02:28:17.285361 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26649:26717(68) ack 25485 win 5840 NBT Packet (DF)
02:28:17.285747 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25485:25623(138) ack 26717 win 63495 NBT Packet (DF)
02:28:17.285856 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26717:26756(39) ack 25623 win 5840 NBT Packet (DF)
02:28:17.286197 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25623:25668(45) ack 26756 win 63456 NBT Packet (DF)
02:28:17.286426 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26756:26795(39) ack 25668 win 5840 NBT Packet (DF)
02:28:17.286849 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25668:25761(93) ack 26795 win 63417 NBT Packet (DF)
02:28:17.287058 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26795:26902(107) ack 25761 win 5840 NBT Packet (DF)
02:28:17.287430 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25761:25837(76) ack 26902 win 63310 NBT Packet (DF)
02:28:17.287585 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 26902:27006(104) ack 25837 win 5840 NBT Packet (DF)
02:28:17.287809 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25837:25913(76) ack 27006 win 63206 NBT Packet (DF)
02:28:17.287972 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27006:27094(88) ack 25913 win 5840 NBT Packet (DF)
02:28:17.288188 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25913:25989(76) ack 27094 win 63118 NBT Packet (DF)
02:28:17.288321 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27094:27166(72) ack 25989 win 5840 NBT Packet (DF)
02:28:17.288517 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 25989:26065(76) ack 27166 win 63046 NBT Packet (DF)
02:28:17.288650 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27166:27234(68) ack 26065 win 5840 NBT Packet (DF)
02:28:17.289017 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26065:26203(138) ack 27234 win 62978 NBT Packet (DF)
02:28:17.289126 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27234:27273(39) ack 26203 win 5840 NBT Packet (DF)
02:28:17.289487 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26203:26248(45) ack 27273 win 62939 NBT Packet (DF)
02:28:17.289595 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27273:27312(39) ack 26248 win 5840 NBT Packet (DF)
02:28:17.290014 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26248:26341(93) ack 27312 win 62900 NBT Packet (DF)
02:28:17.290198 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27312:27419(107) ack 26341 win 5840 NBT Packet (DF)
02:28:17.290573 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26341:26417(76) ack 27419 win 62793 NBT Packet (DF)
02:28:17.290759 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27419:27523(104) ack 26417 win 5840 NBT Packet (DF)
02:28:17.290982 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26417:26493(76) ack 27523 win 64240 NBT Packet (DF)
02:28:17.291120 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27523:27611(88) ack 26493 win 5840 NBT Packet (DF)
02:28:17.291329 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26493:26569(76) ack 27611 win 64152 NBT Packet (DF)
02:28:17.291463 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27611:27683(72) ack 26569 win 5840 NBT Packet (DF)
02:28:17.291670 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26569:26645(76) ack 27683 win 64080 NBT Packet (DF)
02:28:17.291803 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27683:27751(68) ack 26645 win 5840 NBT Packet (DF)
02:28:17.292176 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26645:26783(138) ack 27751 win 64012 NBT Packet (DF)
02:28:17.292283 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27751:27790(39) ack 26783 win 5840 NBT Packet (DF)
02:28:17.292624 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26783:26828(45) ack 27790 win 63973 NBT Packet (DF)
02:28:17.292728 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27790:27829(39) ack 26828 win 5840 NBT Packet (DF)
02:28:17.293143 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26828:26921(93) ack 27829 win 63934 NBT Packet (DF)
02:28:17.293327 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27829:27936(107) ack 26921 win 5840 NBT Packet (DF)
02:28:17.293704 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26921:26997(76) ack 27936 win 63827 NBT Packet (DF)
02:28:17.293854 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 27936:28040(104) ack 26997 win 5840 NBT Packet (DF)
02:28:17.294085 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 26997:27073(76) ack 28040 win 63723 NBT Packet (DF)
02:28:17.294225 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28040:28128(88) ack 27073 win 5840 NBT Packet (DF)
02:28:17.294443 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27073:27149(76) ack 28128 win 63635 NBT Packet (DF)
02:28:17.294608 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28128:28200(72) ack 27149 win 5840 NBT Packet (DF)
02:28:17.294807 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27149:27225(76) ack 28200 win 63563 NBT Packet (DF)
02:28:17.294943 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28200:28268(68) ack 27225 win 5840 NBT Packet (DF)
02:28:17.295312 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27225:27363(138) ack 28268 win 63495 NBT Packet (DF)
02:28:17.295422 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28268:28307(39) ack 27363 win 5840 NBT Packet (DF)
02:28:17.295768 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27363:27408(45) ack 28307 win 63456 NBT Packet (DF)
02:28:17.295873 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28307:28346(39) ack 27408 win 5840 NBT Packet (DF)
02:28:17.296297 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27408:27501(93) ack 28346 win 63417 NBT Packet (DF)
02:28:17.296490 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28346:28453(107) ack 27501 win 5840 NBT Packet (DF)
02:28:17.296840 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27501:27577(76) ack 28453 win 63310 NBT Packet (DF)
02:28:17.296992 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28453:28557(104) ack 27577 win 5840 NBT Packet (DF)
02:28:17.297217 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27577:27653(76) ack 28557 win 63206 NBT Packet (DF)
02:28:17.297355 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28557:28645(88) ack 27653 win 5840 NBT Packet (DF)
02:28:17.297573 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27653:27729(76) ack 28645 win 63118 NBT Packet (DF)
02:28:17.297709 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28645:28717(72) ack 27729 win 5840 NBT Packet (DF)
02:28:17.297910 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27729:27805(76) ack 28717 win 63046 NBT Packet (DF)
02:28:17.298044 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28717:28785(68) ack 27805 win 5840 NBT Packet (DF)
02:28:17.298414 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27805:27943(138) ack 28785 win 62978 NBT Packet (DF)
02:28:17.298523 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28785:28824(39) ack 27943 win 5840 NBT Packet (DF)
02:28:17.298890 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27943:27988(45) ack 28824 win 62939 NBT Packet (DF)
02:28:17.298994 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28824:28863(39) ack 27988 win 5840 NBT Packet (DF)
02:28:17.299417 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 27988:28081(93) ack 28863 win 62900 NBT Packet (DF)
02:28:17.299608 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28863:28970(107) ack 28081 win 5840 NBT Packet (DF)
02:28:17.299974 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28081:28157(76) ack 28970 win 62793 NBT Packet (DF)
02:28:17.300126 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 28970:29074(104) ack 28157 win 5840 NBT Packet (DF)
02:28:17.300350 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28157:28233(76) ack 29074 win 64240 NBT Packet (DF)
02:28:17.300488 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29074:29162(88) ack 28233 win 5840 NBT Packet (DF)
02:28:17.300710 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28233:28309(76) ack 29162 win 64152 NBT Packet (DF)
02:28:17.300846 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29162:29234(72) ack 28309 win 5840 NBT Packet (DF)
02:28:17.301057 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28309:28385(76) ack 29234 win 64080 NBT Packet (DF)
02:28:17.301191 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29234:29302(68) ack 28385 win 5840 NBT Packet (DF)
02:28:17.301574 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28385:28523(138) ack 29302 win 64012 NBT Packet (DF)
02:28:17.301683 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29302:29341(39) ack 28523 win 5840 NBT Packet (DF)
02:28:17.302030 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28523:28568(45) ack 29341 win 63973 NBT Packet (DF)
02:28:17.302135 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29341:29380(39) ack 28568 win 5840 NBT Packet (DF)
02:28:17.302553 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28568:28661(93) ack 29380 win 63934 NBT Packet (DF)
02:28:17.302769 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29380:29487(107) ack 28661 win 5840 NBT Packet (DF)
02:28:17.303139 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28661:28737(76) ack 29487 win 63827 NBT Packet (DF)
02:28:17.303300 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29487:29591(104) ack 28737 win 5840 NBT Packet (DF)
02:28:17.303538 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28737:28813(76) ack 29591 win 63723 NBT Packet (DF)
02:28:17.303677 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29591:29679(88) ack 28813 win 5840 NBT Packet (DF)
02:28:17.303892 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28813:28889(76) ack 29679 win 63635 NBT Packet (DF)
02:28:17.304027 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29679:29751(72) ack 28889 win 5840 NBT Packet (DF)
02:28:17.304228 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28889:28965(76) ack 29751 win 63563 NBT Packet (DF)
02:28:17.304366 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29751:29819(68) ack 28965 win 5840 NBT Packet (DF)
02:28:17.304733 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 28965:29103(138) ack 29819 win 63495 NBT Packet (DF)
02:28:17.304843 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29819:29858(39) ack 29103 win 5840 NBT Packet (DF)
02:28:17.305193 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29103:29148(45) ack 29858 win 63456 NBT Packet (DF)
02:28:17.305298 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29858:29897(39) ack 29148 win 5840 NBT Packet (DF)
02:28:17.305725 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29148:29241(93) ack 29897 win 63417 NBT Packet (DF)
02:28:17.305907 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 29897:30004(107) ack 29241 win 5840 NBT Packet (DF)
02:28:17.306272 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29241:29317(76) ack 30004 win 63310 NBT Packet (DF)
02:28:17.306424 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30004:30108(104) ack 29317 win 5840 NBT Packet (DF)
02:28:17.306646 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29317:29393(76) ack 30108 win 63206 NBT Packet (DF)
02:28:17.306783 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30108:30196(88) ack 29393 win 5840 NBT Packet (DF)
02:28:17.307000 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29393:29469(76) ack 30196 win 63118 NBT Packet (DF)
02:28:17.307135 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30196:30268(72) ack 29469 win 5840 NBT Packet (DF)
02:28:17.307336 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29469:29545(76) ack 30268 win 63046 NBT Packet (DF)
02:28:17.307472 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30268:30336(68) ack 29545 win 5840 NBT Packet (DF)
02:28:17.307840 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29545:29683(138) ack 30336 win 62978 NBT Packet (DF)
02:28:17.307948 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30336:30375(39) ack 29683 win 5840 NBT Packet (DF)
02:28:17.308311 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29683:29728(45) ack 30375 win 62939 NBT Packet (DF)
02:28:17.308416 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30375:30414(39) ack 29728 win 5840 NBT Packet (DF)
02:28:17.308838 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29728:29821(93) ack 30414 win 62900 NBT Packet (DF)
02:28:17.309021 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30414:30521(107) ack 29821 win 5840 NBT Packet (DF)
02:28:17.309399 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29821:29897(76) ack 30521 win 62793 NBT Packet (DF)
02:28:17.309556 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30521:30625(104) ack 29897 win 5840 NBT Packet (DF)
02:28:17.309777 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29897:29973(76) ack 30625 win 64240 NBT Packet (DF)
02:28:17.309917 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30625:30713(88) ack 29973 win 5840 NBT Packet (DF)
02:28:17.310126 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 29973:30049(76) ack 30713 win 64152 NBT Packet (DF)
02:28:17.310368 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30713:30785(72) ack 30049 win 5840 NBT Packet (DF)
02:28:17.310580 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30049:30125(76) ack 30785 win 64080 NBT Packet (DF)
02:28:17.310722 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30785:30853(68) ack 30125 win 5840 NBT Packet (DF)
02:28:17.311085 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30125:30263(138) ack 30853 win 64012 NBT Packet (DF)
02:28:17.311196 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30853:30892(39) ack 30263 win 5840 NBT Packet (DF)
02:28:17.311550 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30263:30308(45) ack 30892 win 63973 NBT Packet (DF)
02:28:17.311658 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30892:30931(39) ack 30308 win 5840 NBT Packet (DF)
02:28:17.312071 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30308:30401(93) ack 30931 win 63934 NBT Packet (DF)
02:28:17.312266 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 30931:31038(107) ack 30401 win 5840 NBT Packet (DF)
02:28:17.312629 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30401:30477(76) ack 31038 win 63827 NBT Packet (DF)
02:28:17.312782 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31038:31142(104) ack 30477 win 5840 NBT Packet (DF)
02:28:17.313008 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30477:30553(76) ack 31142 win 63723 NBT Packet (DF)
02:28:17.313145 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31142:31230(88) ack 30553 win 5840 NBT Packet (DF)
02:28:17.313355 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30553:30629(76) ack 31230 win 63635 NBT Packet (DF)
02:28:17.313490 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31230:31302(72) ack 30629 win 5840 NBT Packet (DF)
02:28:17.313691 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30629:30705(76) ack 31302 win 63563 NBT Packet (DF)
02:28:17.313825 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31302:31370(68) ack 30705 win 5840 NBT Packet (DF)
02:28:17.314198 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30705:30843(138) ack 31370 win 63495 NBT Packet (DF)
02:28:17.314309 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31370:31409(39) ack 30843 win 5840 NBT Packet (DF)
02:28:17.314652 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30843:30888(45) ack 31409 win 63456 NBT Packet (DF)
02:28:17.314756 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31409:31448(39) ack 30888 win 5840 NBT Packet (DF)
02:28:17.441321 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: . ack 31448 win 63417 (DF)
02:28:28.518496 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30888:30931(43) ack 31448 win 63417 NBT Packet (DF)
02:28:28.518699 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31448:31491(43) ack 30931 win 5840 NBT Packet (DF)
02:28:28.518883 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: P 30931:30970(39) ack 31491 win 63374 NBT Packet (DF)
02:28:28.519088 192.168.0.100.netbios-ssn > 192.168.0.2.1049: P 31491:31530(39) ack 30970 win 5840 NBT Packet (DF)
02:28:28.705927 192.168.0.2.1049 > 192.168.0.100.netbios-ssn: . ack 31530 win 63335 (DF)
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: iptables and samba
@ 2004-05-27 21:07 Aldo Lagana
0 siblings, 0 replies; 11+ messages in thread
From: Aldo Lagana @ 2004-05-27 21:07 UTC (permalink / raw)
To: 'azeem ahmad', netfilter
tcpdump individually on the interfaces that the routing is going through
while you attempt to 'browse' or whatever.
You should see packets coming into your input interface but maybe NOT going
out the output interface?!?
# tcpdump -i eth0 > /home/eth0.log &
# tcpdump -i eth1 > /home/eth1.log &
(dont forget to kill both processes when done!)
-----Original Message-----
From: azeem ahmad [mailto:azeem484@hotmail.com]
Sent: Thursday, May 27, 2004 4:57 PM
To: netfilter@lists.netfilter.org
Subject: RE: iptables and samba
neither WINS nor DNS is on my network. only a caching only name server i m
running. and i captured the output of /var/log/messages and that is as below
and i added rules for port udp 137,139,139 and tcp 137,138,139 mean all
three ports of both protocols but it doesnt seem to work
----------------------------------------------------------------------------
--------------------------------------------------
May 28 01:36:27 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51870 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1024
May 28 01:36:32 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51873 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1280
May 28 01:36:38 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51878 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1536
May 28 01:36:43 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51879 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1792
May 28 01:36:57 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=51 TOS=0x00 PREC=0x00 TTL=128 ID=51886 PROTO=UDP
SPT=8167 DPT=8167 LEN=31
May 28 01:36:59 subzero samba(pam_unix)[2284]: session closed for user azeem
May 28 01:38:09 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=81 TOS=0x00 PREC=0x00 TTL=128 ID=32 PROTO=UDP
SPT=8167 DPT=8167 LEN=61
May 28 01:38:09 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=33 PROTO=UDP
SPT=8167 DPT=8167 LEN=25
May 28 01:38:09 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=35 PROTO=UDP
SPT=8167 DPT=8167 LEN=25
May 28 01:38:29 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=43 PROTO=UDP
SPT=8167 DPT=8167 LEN=25
May 28 01:38:59 subzero samba(pam_unix)[2552]: session opened for user must
by (uid=0)
May 28 01:39:33 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7796 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:39:36 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7797 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:39:42 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7798 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:39:50 subzero kernel: IN=ppp0 OUT= MAC= SRC=202.124.201.161
DST=202.124.192.166 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=38996 DF PROTO=TCP
SPT=4811 DPT=2745 WINDOW=8760 RES=0x00 SYN URGP=14133
May 28 01:39:54 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7799 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:40:18 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7800 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:06 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7801 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:33 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8465 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:36 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8466 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:42 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8467 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:54 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8468 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:42:18 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8469 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:42:32 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=65 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=32770 DPT=53 LEN=45
May 28 01:43:06 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8470 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
----------------------------------------------------------------------------
---------------------------------------------------------
Regards
Azeem
>From: <alexis@tpys.com.ar>
>To: "azeem ahmad" <azeem484@hotmail.com>
>CC: <netfilter@lists.netfilter.org>
>Subject: RE: iptables and samba
>Date: Thu, 27 May 2004 16:28:35 -0000
>
>it seems a name resolution issue.
>
>check if you're using WINS or DNS and make sure you're allowing those ports
>in orden to resolve the names. and it will work just fine
>
>azeem ahmad <azeem484@hotmail.com> dijo:
>
> >
> > no one out there could help me?
> >
> > >From: "azeem ahmad" <azeem484@hotmail.com>
> > >To: netfilter@lists.netfilter.org
> > >Subject: iptables and samba
> > >Date: Sun, 23 May 2004 09:20:52 +0000
> > >
> > >hi
> > >i m using the script below
> >
>
>---------------------------------------------------------------------------
>----------------------------------------------------------
> > >iptables -F
> > >iptables -t nat -F
> > >iptables -P INPUT DROP
> > >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
> > >
> > >iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
>8080
> > >#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port
>8080
> > >
> > >iptables -P FORWARD DROP
> > >iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
> > >
> > >iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> >
>
>---------------------------------------------------------------------------
>----------------------------------------------------------
> > >
> > >i have two shares on samba server "Soft and linux" in these shares
>there
> > >are many folders. whenever i run the above script and then i open the
>share
> > >it takes atleast 4 minutes to open the share. but it doesnt take time
> > >while browsing inside share.
> > >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
> > >when i double click on soft it takes atleast 4 minutes but after that
>when
> > >i click on adobe then acrobat then acrobat6 it takes now time it just
>brose
> > >them normally. same problem is with the other share named linux.
> > >but if i dont run this script then all shares work fine with no delay
> > >
> > >i dont know what is the udp port 80 for but i just saw its traffic on
>my
> > >network in iptraf so i included it in my script
> > >
> > >Regards
> > >Azeem
> > >
> > >_________________________________________________________________
> > >Add photos to your e-mail with MSN 8. Get 2 months FREE*.
> > >http://join.msn.com/?page=features/featuredemail
> > >
> > >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> >
> >
>
>
>
>--
>
>
>
_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail
Visit our website at http://www.p21.com/visit
The information in this e-mail is confidential and may contain legally
privileged information. It is intended solely for the person or entity to
which it is addressed. Access to this e-mail by anyone else is
unauthorized. If you are not the intended recipient, any disclosure,
copying, distribution, action taken, or action omitted to be taken in
reliance on it, is prohibited and may be unlawful. If you received this
e-mail in error, please contact the sender and delete the material from any
computer.
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: iptables and samba
@ 2004-05-27 20:56 azeem ahmad
0 siblings, 0 replies; 11+ messages in thread
From: azeem ahmad @ 2004-05-27 20:56 UTC (permalink / raw)
To: netfilter
neither WINS nor DNS is on my network. only a caching only name server i m
running. and i captured the output of /var/log/messages and that is as below
and i added rules for port udp 137,139,139 and tcp 137,138,139 mean all
three ports of both protocols but it doesnt seem to work
------------------------------------------------------------------------------------------------------------------------------
May 28 01:36:27 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51870 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1024
May 28 01:36:32 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51873 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1280
May 28 01:36:38 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51878 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1536
May 28 01:36:43 subzero kernel: IN=eth0 OUT=
MAC=00:b0:d0:3d:84:1f:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=192.168.0.100 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=51879 PROTO=ICMP
TYPE=8 CODE=0 ID=512 SEQ=1792
May 28 01:36:57 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=51 TOS=0x00 PREC=0x00 TTL=128 ID=51886 PROTO=UDP
SPT=8167 DPT=8167 LEN=31
May 28 01:36:59 subzero samba(pam_unix)[2284]: session closed for user azeem
May 28 01:38:09 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=81 TOS=0x00 PREC=0x00 TTL=128 ID=32 PROTO=UDP
SPT=8167 DPT=8167 LEN=61
May 28 01:38:09 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=33 PROTO=UDP
SPT=8167 DPT=8167 LEN=25
May 28 01:38:09 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=35 PROTO=UDP
SPT=8167 DPT=8167 LEN=25
May 28 01:38:29 subzero kernel: IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:07:e9:f4:4d:ce:08:00 SRC=192.168.0.2
DST=255.255.255.255 LEN=45 TOS=0x00 PREC=0x00 TTL=128 ID=43 PROTO=UDP
SPT=8167 DPT=8167 LEN=25
May 28 01:38:59 subzero samba(pam_unix)[2552]: session opened for user must
by (uid=0)
May 28 01:39:33 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7796 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:39:36 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7797 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:39:42 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7798 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:39:50 subzero kernel: IN=ppp0 OUT= MAC= SRC=202.124.201.161
DST=202.124.192.166 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=38996 DF PROTO=TCP
SPT=4811 DPT=2745 WINDOW=8760 RES=0x00 SYN URGP=14133
May 28 01:39:54 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7799 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:40:18 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7800 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:06 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7801 DF PROTO=TCP SPT=35625 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:33 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8465 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:36 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8466 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:42 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8467 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:41:54 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8468 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:42:18 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8469 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
May 28 01:42:32 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=65 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=32770 DPT=53 LEN=45
May 28 01:43:06 subzero kernel: IN=lo OUT=
MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=8470 DF PROTO=TCP SPT=35699 DPT=80
WINDOW=32767 RES=0x00 SYN URGP=0
-------------------------------------------------------------------------------------------------------------------------------------
Regards
Azeem
>From: <alexis@tpys.com.ar>
>To: "azeem ahmad" <azeem484@hotmail.com>
>CC: <netfilter@lists.netfilter.org>
>Subject: RE: iptables and samba
>Date: Thu, 27 May 2004 16:28:35 -0000
>
>it seems a name resolution issue.
>
>check if you're using WINS or DNS and make sure you're allowing those ports
>in orden to resolve the names. and it will work just fine
>
>azeem ahmad <azeem484@hotmail.com> dijo:
>
> >
> > no one out there could help me?
> >
> > >From: "azeem ahmad" <azeem484@hotmail.com>
> > >To: netfilter@lists.netfilter.org
> > >Subject: iptables and samba
> > >Date: Sun, 23 May 2004 09:20:52 +0000
> > >
> > >hi
> > >i m using the script below
> >
> >---------------------------------------------------------------------------
>----------------------------------------------------------
> > >iptables -F
> > >iptables -t nat -F
> > >iptables -P INPUT DROP
> > >iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
> > >iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
> > >
> > >iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
>8080
> > >#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port
>8080
> > >
> > >iptables -P FORWARD DROP
> > >iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
> > >iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
> > >
> > >iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> >
> >---------------------------------------------------------------------------
>----------------------------------------------------------
> > >
> > >i have two shares on samba server "Soft and linux" in these shares
>there
> > >are many folders. whenever i run the above script and then i open the
>share
> > >it takes atleast 4 minutes to open the share. but it doesnt take time
> > >while browsing inside share.
> > >mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
> > >when i double click on soft it takes atleast 4 minutes but after that
>when
> > >i click on adobe then acrobat then acrobat6 it takes now time it just
>brose
> > >them normally. same problem is with the other share named linux.
> > >but if i dont run this script then all shares work fine with no delay
> > >
> > >i dont know what is the udp port 80 for but i just saw its traffic on
>my
> > >network in iptraf so i included it in my script
> > >
> > >Regards
> > >Azeem
> > >
> > >_________________________________________________________________
> > >Add photos to your e-mail with MSN 8. Get 2 months FREE*.
> > >http://join.msn.com/?page=features/featuredemail
> > >
> > >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> >
> >
>
>
>
>--
>
>
>
_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: iptables and samba
@ 2004-05-26 8:29 CPD - David Cardeñosa Rubio
0 siblings, 0 replies; 11+ messages in thread
From: CPD - David Cardeñosa Rubio @ 2004-05-26 8:29 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 3244 bytes --]
Hi
This seems to be related to inverse name resolution.
You can try put the client computer name in /etc/hosts and try the conection
again.
In some cases samba try to resolv the client computer name, make a DNS
query, until the DNS query finish the conection not be establised correctly.
Gratings
David Cardeñosa
-----Mensaje original-----
De: azeem ahmad [mailto:azeem484@hotmail.com]
Enviado el: domingo, 23 de mayo de 2004 11:21
Para: netfilter@lists.netfilter.org
Asunto: iptables and samba
hi
i m using the script below
----------------------------------------------------------------------------
---------------------------------------------------------
iptables -F
iptables -t nat -F
iptables -P INPUT DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 8080
iptables -P FORWARD DROP
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
----------------------------------------------------------------------------
---------------------------------------------------------
i have two shares on samba server "Soft and linux" in these shares there are
many folders. whenever i run the above script and then i open the share it
takes atleast 4 minutes to open the share. but it doesnt take time while
browsing inside share.
mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
when i double click on soft it takes atleast 4 minutes but after that when i
click on adobe then acrobat then acrobat6 it takes now time it just brose
them normally. same problem is with the other share named linux.
but if i dont run this script then all shares work fine with no delay
i dont know what is the udp port 80 for but i just saw its traffic on my
network in iptraf so i included it in my script
Regards
Azeem
_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*.
http://join.msn.com/?page=features/featuredemail
[-- Attachment #2: Type: text/html, Size: 5374 bytes --]
^ permalink raw reply [flat|nested] 11+ messages in thread
* iptables and samba
@ 2004-05-23 9:20 azeem ahmad
0 siblings, 0 replies; 11+ messages in thread
From: azeem ahmad @ 2004-05-23 9:20 UTC (permalink / raw)
To: netfilter
hi
i m using the script below
-------------------------------------------------------------------------------------------------------------------------------------
iptables -F
iptables -t nat -F
iptables -P INPUT DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 8080
iptables -P FORWARD DROP
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
-------------------------------------------------------------------------------------------------------------------------------------
i have two shares on samba server "Soft and linux" in these shares there are
many folders. whenever i run the above script and then i open the share it
takes atleast 4 minutes to open the share. but it doesnt take time while
browsing inside share.
mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
when i double click on soft it takes atleast 4 minutes but after that when i
click on adobe then acrobat then acrobat6 it takes now time it just brose
them normally. same problem is with the other share named linux.
but if i dont run this script then all shares work fine with no delay
i dont know what is the udp port 80 for but i just saw its traffic on my
network in iptraf so i included it in my script
Regards
Azeem
_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*.
http://join.msn.com/?page=features/featuredemail
^ permalink raw reply [flat|nested] 11+ messages in thread
end of thread, other threads:[~2004-05-31 20:38 UTC | newest]
Thread overview: 11+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-05-27 15:40 iptables and samba azeem ahmad
2004-05-27 16:00 ` Antony Stone
2004-05-27 16:28 ` alexis
-- strict thread matches above, loose matches on Subject: below --
2004-05-31 20:38 azeem ahmad
2004-05-28 19:44 Aldo Lagana
2004-05-28 19:32 azeem ahmad
2004-05-27 21:35 azeem ahmad
2004-05-27 21:07 Aldo Lagana
2004-05-27 20:56 azeem ahmad
2004-05-26 8:29 CPD - David Cardeñosa Rubio
2004-05-23 9:20 azeem ahmad
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.