Ethereal-dev: Re: RE: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (andX.400dissectors)-> B
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Yuriy Sidelnikov" <YSidelnikov@xxxxxxxx>
Date: Fri, 09 Sep 2005 11:38:04 +0400
Hi, Thank you.Now it looks much better. But there're still some issues. Please, have a look to the ftam trace file with nbs9(directory) records. I mean 79 frame. I attached output from old ftam dissector to show how it has to be. Second prioblem is in the 75 frame in f-open-response. Thank you.Sidelnikov Anders Broman (AL/EAB) wrote:
Hi, What about if you apply this diff against packet-pres-template.c and regenerate the dissector with the latest SVN? The BER problem is fixed there. Brg Anders
............................................................. Программа создания веб-сайтов за два дня: http://web.sema.ru/
............................................................. Программа создания веб-сайтов за два дня: http://web.sema.ru/
No. Time Source Destination Protocol Info
72 2.026147 10.0.81.190 10.0.80.13 FTAM f-initialize-request:
Frame 72 (375 bytes on wire, 375 bytes captured)
Ethernet II, Src: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6), Dst: 00:e0:18:96:a6:de (00:e0:18:96:a6:de)
Internet Protocol, Src: 10.0.81.190 (10.0.81.190), Dst: 10.0.80.13 (10.0.80.13)
Transmission Control Protocol, Src Port: 3412 (3412), Dst Port: tsap (102), Seq: 25, Ack: 25, Len: 321
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
fTAM-Regime-PDU: f-initialize-request (0)
No. Time Source Destination Protocol Info
73 2.032100 10.0.80.13 10.0.81.190 FTAM f-initialize-response:
Frame 73 (342 bytes on wire, 342 bytes captured)
Ethernet II, Src: 00:e0:18:96:a6:de (00:e0:18:96:a6:de), Dst: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6)
Internet Protocol, Src: 10.0.80.13 (10.0.80.13), Dst: 10.0.81.190 (10.0.81.190)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 3412 (3412), Seq: 25, Ack: 346, Len: 288
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
fTAM-Regime-PDU: f-initialize-response (1)
No. Time Source Destination Protocol Info
74 2.033028 10.0.81.190 10.0.80.13 FTAM f-end-group-request:
Frame 74 (160 bytes on wire, 160 bytes captured)
Ethernet II, Src: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6), Dst: 00:e0:18:96:a6:de (00:e0:18:96:a6:de)
Internet Protocol, Src: 10.0.81.190 (10.0.81.190), Dst: 10.0.80.13 (10.0.80.13)
Transmission Control Protocol, Src Port: 3412 (3412), Dst Port: tsap (102), Seq: 346, Ack: 313, Len: 106
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
file-PDU: f-begin-group-request (22)
f-begin-group-request
threshold: 2
FTAM
file-PDU: f-select-request (6)
f-select-request
FTAM
file-PDU: f-open-request (18)
f-open-request
[Malformed Packet: FTAM]
FTAM
file-PDU: f-end-group-request (24)
f-end-group-request
No. Time Source Destination Protocol Info
75 2.046233 10.0.80.13 10.0.81.190 FTAM f-end-group-response:
Frame 75 (159 bytes on wire, 159 bytes captured)
Ethernet II, Src: 00:e0:18:96:a6:de (00:e0:18:96:a6:de), Dst: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6)
Internet Protocol, Src: 10.0.80.13 (10.0.80.13), Dst: 10.0.81.190 (10.0.81.190)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 3412 (3412), Seq: 313, Ack: 452, Len: 105
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
file-PDU: f-begin-group-response (23)
f-begin-group-response
FTAM
file-PDU: f-select-response (7)
f-select-response
FTAM
file-PDU: f-open-response (19)
f-open-response
[Malformed Packet: FTAM]
FTAM
file-PDU: f-end-group-response (25)
f-end-group-response
No. Time Source Destination Protocol Info
76 2.046921 10.0.81.190 10.0.80.13 FTAM f-read-request:
Frame 76 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6), Dst: 00:e0:18:96:a6:de (00:e0:18:96:a6:de)
Internet Protocol, Src: 10.0.81.190 (10.0.81.190), Dst: 10.0.80.13 (10.0.80.13)
Transmission Control Protocol, Src Port: 3412 (3412), Dst Port: tsap (102), Seq: 452, Ack: 418, Len: 39
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
bulk-Data-PDU: f-read-request (32)
f-read-request
No. Time Source Destination Protocol Info
79 2.109090 10.0.80.13 10.0.81.190 FTAM
Frame 79 (389 bytes on wire, 389 bytes captured)
Ethernet II, Src: 00:e0:18:96:a6:de (00:e0:18:96:a6:de), Dst: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6)
Internet Protocol, Src: 10.0.80.13 (10.0.80.13), Dst: 10.0.81.190 (10.0.81.190)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 3412 (3412), Seq: 3338, Ack: 491, Len: 335
Reassembled TCP Segments (3255 bytes): #77(1460), #78(1460), #79(335)
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: !OfficeScan NT
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 15:19:26 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2003-01-28 08:25:18 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:13:14 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 16384
future-Object-size: actual-values (1)
actual-values: 16384
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: arcldr.exe
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2001-05-04 16:05:02 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-07-22 12:05:04 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2003-05-02 07:00:38 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 150528
future-Object-size: actual-values (1)
actual-values: 150528
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: arcsetup.exe
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2001-05-04 16:05:02 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-07-22 12:05:04 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2003-05-02 07:00:38 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 163840
future-Object-size: actual-values (1)
actual-values: 163840
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: autoexec.bat
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: boot.ini
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 20:59:07 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 17:32:59 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2003-06-06 16:16:36 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 191
future-Object-size: actual-values (1)
actual-values: 191
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: config.sys
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: Documents and Settings
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 21:00:09 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-03-05 12:35:01 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:13:26 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 12288
future-Object-size: actual-values (1)
actual-values: 12288
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: io.sys
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: msdos.sys
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2002-09-18 17:14:01 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: mvfslogs
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 18:14:51 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-03-11 15:31:04 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:13:26 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 4096
future-Object-size: actual-values (1)
actual-values: 4096
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: My Music
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2003-06-11 16:39:43 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2003-06-11 16:39:43 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:13:26 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: FLAGSHIP_TS\___ASipatov
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: ntdetect.com
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2001-05-04 16:05:02 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 14:04:46 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2002-09-18 15:18:24 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 34724
future-Object-size: actual-values (1)
actual-values: 34724
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: ntldr
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2001-05-04 16:05:02 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 14:04:47 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2002-09-18 14:04:47 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 214432
future-Object-size: actual-values (1)
actual-values: 214432
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: oracle
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 16:29:18 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2002-09-18 16:29:18 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:13:26 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: pagefile.sys
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: Program Files
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 21:02:01 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-03-11 15:28:47 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:15:29 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 12288
future-Object-size: actual-values (1)
actual-values: 12288
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: recycler
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 17:01:59 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-02-12 10:38:22 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-09 14:34:54 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: System Volume Information
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: temp
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2003-06-11 16:03:48 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-02-12 10:38:22 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:14:02 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: FLAGSHIP_TS\___ASipatov
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: tempof
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2004-01-19 09:57:41 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-01-28 16:22:15 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:14:02 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 0
future-Object-size: actual-values (1)
actual-values: 0
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: tmuninst.ini
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.0.8571.5.1
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2004-01-20 17:14:11 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-03-11 13:13:41 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-11 13:13:41 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 21
future-Object-size: actual-values (1)
actual-values: 21
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: BF (read, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.0.. .... = insert: False
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
legal-qualification: no-value-available (0)
no-value-available
nBS9
attributes
pathname: incomplete-pathname (0)
incomplete-pathname:
Item: winnt
Padding: 5
permitted-actions: FF00 (read, insert, replace, extend, erase, read-attribute, change-attribute, delete-Object)
1... .... = read: True
.1.. .... = insert: True
..1. .... = replace: True
...1 .... = extend: True
.... 1... = erase: True
.... .1.. = read-attribute: True
.... ..1. = change-attribute: True
.... ...1 = delete-Object: True
...0 .... = pass: False
.... 0... = link: False
0... .... = traversal: False
.0.. .... = reverse-traversal: False
..0. .... = random-Order: False
contents-type: document-type (0)
document-type
document-type-name: 1.3.14.5.5.9
storage-account: no-value-available (0)
no-value-available
date-and-time-of-creation: actual-values (1)
actual-values: 2002-09-18 20:57:22 (\245)
date-and-time-of-last-modification: actual-values (1)
actual-values: 2004-03-11 15:28:14 (\246)
date-and-time-of-last-read-access: actual-values (1)
actual-values: 2004-03-12 11:14:04 (\247)
date-and-time-of-last-attribute-modification: no-value-available (0)
no-value-available
identity-of-creator: actual-values (1)
actual-values: Administrators
identity-of-last-modifier: no-value-available (0)
no-value-available
identity-of-last-reader: no-value-available (0)
no-value-available
identity-last-attribute-modifier: no-value-available (0)
no-value-available
object-availability: actual-values (1)
actual-values: immediate-availability (0)
object-size: actual-values (1)
actual-values: 28672
future-Object-size: actual-values (1)
actual-values: 28672
access-control: actual-values (1)
actual-values:
Item
Padding: 0
action-list: 84 (read, read-attribute)
1... .... = read: True
.0.. .... = insert: False
..0. .... = replace: False
...0 .... = extend: False
.... 0... = erase: False
.... .1.. = read-attribute: True
.... ..0. = change-attribute: False
.... ...0 = delete-Object: False
legal-qualification: no-value-available (0)
no-value-available
No. Time Source Destination Protocol Info
81 2.109270 10.0.80.13 10.0.81.190 FTAM f-data-end-request:
Frame 81 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:e0:18:96:a6:de (00:e0:18:96:a6:de), Dst: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6)
Internet Protocol, Src: 10.0.80.13 (10.0.80.13), Dst: 10.0.81.190 (10.0.81.190)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 3412 (3412), Seq: 3673, Ack: 491, Len: 32
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
bulk-Data-PDU: f-data-end-request (34)
f-data-end-request
action-result: success (0)
No. Time Source Destination Protocol Info
82 2.113709 10.0.81.190 10.0.80.13 FTAM f-transfer-end-request:
Frame 82 (83 bytes on wire, 83 bytes captured)
Ethernet II, Src: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6), Dst: 00:e0:18:96:a6:de (00:e0:18:96:a6:de)
Internet Protocol, Src: 10.0.81.190 (10.0.81.190), Dst: 10.0.80.13 (10.0.80.13)
Transmission Control Protocol, Src Port: 3412 (3412), Dst Port: tsap (102), Seq: 491, Ack: 3705, Len: 29
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
bulk-Data-PDU: f-transfer-end-request (35)
f-transfer-end-request
No. Time Source Destination Protocol Info
83 2.114187 10.0.80.13 10.0.81.190 FTAM f-transfer-end-response:
Frame 83 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:e0:18:96:a6:de (00:e0:18:96:a6:de), Dst: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6)
Internet Protocol, Src: 10.0.80.13 (10.0.80.13), Dst: 10.0.81.190 (10.0.81.190)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 3412 (3412), Seq: 3705, Ack: 520, Len: 32
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
bulk-Data-PDU: f-transfer-end-response (36)
f-transfer-end-response
action-result: success (0)
No. Time Source Destination Protocol Info
84 2.114652 10.0.81.190 10.0.80.13 FTAM f-end-group-request:
Frame 84 (124 bytes on wire, 124 bytes captured)
Ethernet II, Src: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6), Dst: 00:e0:18:96:a6:de (00:e0:18:96:a6:de)
Internet Protocol, Src: 10.0.81.190 (10.0.81.190), Dst: 10.0.80.13 (10.0.80.13)
Transmission Control Protocol, Src Port: 3412 (3412), Dst Port: tsap (102), Seq: 520, Ack: 3737, Len: 70
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
file-PDU: f-begin-group-request (22)
f-begin-group-request
threshold: 2
FTAM
file-PDU: f-close-request (20)
f-close-request
FTAM
file-PDU: f-deselect-request (8)
f-deselect-request
FTAM
file-PDU: f-end-group-request (24)
f-end-group-request
No. Time Source Destination Protocol Info
85 2.115921 10.0.80.13 10.0.81.190 FTAM f-end-group-response:
Frame 85 (127 bytes on wire, 127 bytes captured)
Ethernet II, Src: 00:e0:18:96:a6:de (00:e0:18:96:a6:de), Dst: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6)
Internet Protocol, Src: 10.0.80.13 (10.0.80.13), Dst: 10.0.81.190 (10.0.81.190)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 3412 (3412), Seq: 3737, Ack: 590, Len: 73
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
file-PDU: f-begin-group-response (23)
f-begin-group-response
FTAM
file-PDU: f-close-response (21)
f-close-response
FTAM
file-PDU: f-deselect-response (9)
f-deselect-response
FTAM
file-PDU: f-end-group-response (25)
f-end-group-response
No. Time Source Destination Protocol Info
86 2.116368 10.0.81.190 10.0.80.13 FTAM f-terminate-request:
Frame 86 (104 bytes on wire, 104 bytes captured)
Ethernet II, Src: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6), Dst: 00:e0:18:96:a6:de (00:e0:18:96:a6:de)
Internet Protocol, Src: 10.0.81.190 (10.0.81.190), Dst: 10.0.80.13 (10.0.80.13)
Transmission Control Protocol, Src Port: 3412 (3412), Dst Port: tsap (102), Seq: 590, Ack: 3810, Len: 50
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
fTAM-Regime-PDU: f-terminate-request (2)
No. Time Source Destination Protocol Info
87 2.117285 10.0.80.13 10.0.81.190 FTAM f-terminate-response:
Frame 87 (104 bytes on wire, 104 bytes captured)
Ethernet II, Src: 00:e0:18:96:a6:de (00:e0:18:96:a6:de), Dst: 00:d0:b7:1b:68:d6 (00:d0:b7:1b:68:d6)
Internet Protocol, Src: 10.0.80.13 (10.0.80.13), Dst: 10.0.81.190 (10.0.81.190)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 3412 (3412), Seq: 3810, Ack: 640, Len: 50
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
fTAM-Regime-PDU: f-terminate-response (3)
Attachment:
sun_to_siement
Description: Binary data
- Follow-Ups:
- References:
- RE: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (andX.400dissectors)-> BER CHOICE PROBLEM
- From: Anders Broman (AL/EAB)
- RE: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (andX.400dissectors)-> BER CHOICE PROBLEM
- Prev by Date: [Ethereal-dev] Problem building ethereal 0.10.12 without libpcap
- Next by Date: Re: [Ethereal-dev] Problem building ethereal 0.10.12 without libpcap
- Previous by thread: RE: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (andX.400dissectors)-> BER CHOICE PROBLEM
- Next by thread: SV: RE: SV: SV: [Ethereal-dev] PRES and RTSE dissectors(andX.400dissectors)-> BER CHOICE PROBLEM
- Index(es):
