Re: reading your email via tcpdump

Denis Vlasenko (vda@port.imtp.ilyichevsk.odessa.ua)
Tue, 19 Mar 2002 09:39:01 -0200

On 18 March 2002 15:20, Mike Galbraith wrote:
> Greetings,
>
> Kernel version is 2.5.7-pre2 if that matters.
>
> I was reading lkml with a forgotten tcpdump running, when my son turned
> on his windows box, blessing me with the usual msjunk. Is the attached
> just a tcpdump bug? I had already read that message, and didn't really
> expect to see it again.. not in my tcpdump log anyway :)

8-( We need SMB experts here...
I presume your box is a Linux one.
Is this packet went from your box to win box?
What was running on your box? Samba?
Did you use smbfs?

16:42:49.412862 10.0.0.101.netbios-dgm > 10.255.255.255.netbios-dgm:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
bcast from your box to NetBIOS port?
>>> NBT UDP PACKET(138) Res=0x1102 ID=0x54 IP=10.0.0.101 Port=138 Length=193
Res2=0x0
SourceName=T1H6I3 NameType=0x00 (Workstation)
^^^^^^ your hostname?
DestName=
SMB PACKET: SMBunknown (REQUEST)
SMB Command = 0x43
Error class = 0x46
Error code = 20550
Flags1 = 0x45
Flags2 = 0x4E
Tree ID = 17990
Proc ID = 18000
UID = 16720
MID = 16707
Word Count = 66
SMBError = ERROR: Unknown error (70,20550) 

--
vda
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/