Wireshark-users: [Wireshark-users] capture
From: Kimraj Sohan <sohan5@xxxxxxxxxxx>
Date: Sun, 31 Aug 2008 13:14:10 +0000
Hello huys, I did a capture from one of our pc and I was wondering if someone can explain to me what It i am looking at, to me it looks like a lot of broadcast traffic. How i did it was i installed WS on one of the pc, and started the capture option, not too sure if i'm doing the capture correctly either. We wanted to see if there has been some unfamiliar activities at one of our site. appreciate any input, since is my first capture. thx kim Be the filmmaker you always wanted to be—learn how to burn a DVD with Windows®. Make your smash hit |
No. Time Source Destination Protocol Info 1 0.000000 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 1 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 2 0.638589 172.30.48.13 172.30.1.50 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \.wireshark Frame 2 (170 bytes on wire, 170 bytes captured) Ethernet II, Src: Usi_43:ad:8a (00:1e:37:43:ad:8a), Dst: Cisco_fd:ef:01 (00:1c:58:fd:ef:01) Internet Protocol, Src: 172.30.48.13 (172.30.48.13), Dst: 172.30.1.50 (172.30.1.50) Transmission Control Protocol, Src Port: mobrien-chat (2031), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 116 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 3 0.703614 172.30.1.50 172.30.48.13 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND Frame 3 (93 bytes on wire, 93 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Usi_43:ad:8a (00:1e:37:43:ad:8a) Internet Protocol, Src: 172.30.1.50 (172.30.1.50), Dst: 172.30.48.13 (172.30.48.13) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: mobrien-chat (2031), Seq: 1, Ack: 117, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 4 0.833545 172.30.48.13 172.30.1.50 TCP mobrien-chat > microsoft-ds [ACK] Seq=117 Ack=40 Win=63849 [TCP CHECKSUM INCORRECT] Len=0 Frame 4 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Usi_43:ad:8a (00:1e:37:43:ad:8a), Dst: Cisco_fd:ef:01 (00:1c:58:fd:ef:01) Internet Protocol, Src: 172.30.48.13 (172.30.48.13), Dst: 172.30.1.50 (172.30.1.50) Transmission Control Protocol, Src Port: mobrien-chat (2031), Dst Port: microsoft-ds (445), Seq: 117, Ack: 40, Len: 0 No. Time Source Destination Protocol Info 5 1.497862 172.30.48.13 172.30.1.50 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \wireshark Frame 5 (170 bytes on wire, 170 bytes captured) Ethernet II, Src: Usi_43:ad:8a (00:1e:37:43:ad:8a), Dst: Cisco_fd:ef:01 (00:1c:58:fd:ef:01) Internet Protocol, Src: 172.30.48.13 (172.30.48.13), Dst: 172.30.1.50 (172.30.1.50) Transmission Control Protocol, Src Port: mobrien-chat (2031), Dst Port: microsoft-ds (445), Seq: 117, Ack: 40, Len: 116 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 6 1.551274 172.30.1.50 172.30.48.13 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND Frame 6 (93 bytes on wire, 93 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Usi_43:ad:8a (00:1e:37:43:ad:8a) Internet Protocol, Src: 172.30.1.50 (172.30.1.50), Dst: 172.30.48.13 (172.30.48.13) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: mobrien-chat (2031), Seq: 40, Ack: 233, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 7 1.738796 172.30.48.13 172.30.1.50 TCP mobrien-chat > microsoft-ds [ACK] Seq=233 Ack=79 Win=63810 [TCP CHECKSUM INCORRECT] Len=0 Frame 7 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Usi_43:ad:8a (00:1e:37:43:ad:8a), Dst: Cisco_fd:ef:01 (00:1c:58:fd:ef:01) Internet Protocol, Src: 172.30.48.13 (172.30.48.13), Dst: 172.30.1.50 (172.30.1.50) Transmission Control Protocol, Src Port: mobrien-chat (2031), Dst Port: microsoft-ds (445), Seq: 233, Ack: 79, Len: 0 No. Time Source Destination Protocol Info 8 2.002480 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 8 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 9 2.057974 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.51.220? Tell 172.30.51.217 Frame 9 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 10 2.695142 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 10 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 11 2.698601 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 11 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 12 4.000163 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 12 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 13 4.181737 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.47? Tell 172.30.51.4 Frame 13 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 14 4.251553 172.30.51.100 172.30.51.255 BROWSER Host Announcement BF-CAL-CTX52, Workstation, Server, NT Workstation, NT Server, Backup Browser, Unknown server type:23, Unknown server type:25 Frame 14 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_c2:06:de (00:1c:c4:c2:06:de), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.100 (172.30.51.100), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 15 6.000049 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 15 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 16 6.098719 00000000.001083271b7d 00000000.ffffffffffff IPX SAP General Response Frame 16 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 17 6.364599 172.30.51.17 172.30.51.255 BROWSER Host Announcement BF-CAL-F1, Workstation, Server, NT Workstation, NT Server, Backup Browser, Unknown server type:25 Frame 17 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: Vmware_b4:16:01 (00:50:56:b4:16:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.17 (172.30.51.17), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 18 6.703889 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.51.106? Tell 172.30.51.217 Frame 18 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 19 6.748902 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 19 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 20 6.927249 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.119? Tell 172.30.51.217 Frame 20 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 21 7.048275 HewlettP_22:be:36 Broadcast ARP Who has 172.30.48.119? Tell 172.30.51.240 Frame 21 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 22 7.741823 00000000.0060b0ae43ed 00000000.ffffffffffff IPX SAP General Response Frame 22 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 23 8.000301 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 23 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 24 8.604020 00000000.0010833e1eac 00000000.ffffffffffff IPX SAP General Query Frame 24 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 25 9.447500 HewlettP_07:47:a9 Broadcast ARP Who has 172.30.48.205? Tell 172.30.51.15 Frame 25 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_07:47:a9 (00:1e:0b:07:47:a9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 26 9.710415 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.166? Tell 172.30.51.217 Frame 26 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 27 10.000572 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 27 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 28 10.134738 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 28 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 29 10.138278 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 29 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 30 10.181716 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.47? Tell 172.30.51.4 Frame 30 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 31 10.816150 HewlettP_f8:56:ad Broadcast ARP Who has 172.30.51.89? Tell 172.30.48.90 Frame 31 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:56:ad (00:0b:cd:f8:56:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 32 11.047806 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 32 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 33 11.532514 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 33 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 34 11.532522 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1c> Frame 34 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 35 11.532852 HewlettP_22:be:36 Broadcast ARP Who has 172.30.51.187? Tell 172.30.51.240 Frame 35 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 36 11.532854 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.51.187? Tell 172.30.51.217 Frame 36 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 37 11.533645 172.30.51.187 172.30.51.255 SMB_NETLOGON Query for PDC from APOGEEWS Frame 37 (276 bytes on wire, 276 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Logon Protocol (Old) No. Time Source Destination Protocol Info 38 11.797775 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 38 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 39 12.000774 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 39 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 40 12.282188 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 40 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 41 12.547838 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 41 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 42 12.685501 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 42 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 43 12.688880 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 43 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 44 12.748389 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 44 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 45 13.032156 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 45 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 46 14.000971 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 46 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 47 14.474607 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 47 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 48 14.474622 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 48 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 49 14.474626 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 49 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 50 14.474938 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 50 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 51 14.474946 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 51 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 52 14.474950 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 52 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 53 15.707237 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 53 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 54 15.708747 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 54 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 55 16.000772 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 55 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 56 16.532374 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 56 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 57 16.532383 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1c> Frame 57 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 58 16.533171 172.30.51.187 172.30.51.255 SMB_NETLOGON Query for PDC from APOGEEWS Frame 58 (276 bytes on wire, 276 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Logon Protocol (Old) No. Time Source Destination Protocol Info 59 17.281888 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 59 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 60 18.001601 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 60 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 61 18.032070 172.30.51.187 172.30.51.255 NBNS Name query NB BMSL<1b> Frame 61 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 62 18.748478 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 62 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 63 19.435404 HewlettP_b6:84:58 Broadcast ARP Who has 172.30.51.24? Tell 172.30.48.182 Frame 63 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b6:84:58 (00:1a:4b:b6:84:58), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 64 19.701878 00000000.0060b0ccd3aa 00000000.ffffffffffff IPX SAP General Query Frame 64 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 65 19.706349 HewlettP_f8:56:ad Broadcast ARP Who has 172.30.51.89? Tell 172.30.48.90 Frame 65 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:56:ad (00:0b:cd:f8:56:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 66 20.003204 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 66 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 67 20.702572 HewlettP_b4:79:ba Broadcast ARP Who has 172.30.51.11? Tell 172.30.51.216 Frame 67 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 68 20.746942 HewlettP_07:47:a9 Broadcast ARP Who has 172.30.51.216? Tell 172.30.51.15 Frame 68 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_07:47:a9 (00:1e:0b:07:47:a9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 69 20.747741 HewlettP_b4:79:ba Broadcast ARP Who has 172.30.51.26? Tell 172.30.51.216 Frame 69 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 70 21.741807 172.30.48.143 172.30.51.255 BROWSER Host Announcement BSIM, Workstation, Server, NT Workstation, Potential Browser Frame 70 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_7b:3d:b6 (00:02:a5:7b:3d:b6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.143 (172.30.48.143), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 71 21.810328 HewlettP_f8:55:ff Broadcast ARP Who has 172.30.51.218? Tell 172.30.48.177 Frame 71 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:55:ff (00:0b:cd:f8:55:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 72 21.810331 HewlettP_b4:19:8e HewlettP_f8:55:ff ARP 172.30.51.218 is at 00:0e:7f:b4:19:8e Frame 72 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:19:8e (00:0e:7f:b4:19:8e), Dst: HewlettP_f8:55:ff (00:0b:cd:f8:55:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Info 73 21.812019 172.30.51.218 172.30.48.177 UDP Source port: ssc-agent Destination port: ssc-agent Frame 73 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: HewlettP_b4:19:8e (00:0e:7f:b4:19:8e), Dst: HewlettP_f8:55:ff (00:0b:cd:f8:55:ff) Internet Protocol, Src: 172.30.51.218 (172.30.51.218), Dst: 172.30.48.177 (172.30.48.177) User Datagram Protocol, Src Port: ssc-agent (2967), Dst Port: ssc-agent (2967) Data (20 bytes) 0000 00 df 00 01 16 c0 00 00 00 00 00 00 79 44 6c 23 ............yDl# 0010 db a8 0b fc .... No. Time Source Destination Protocol Info 74 22.006899 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 74 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 75 24.002302 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 75 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 76 25.366978 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 76 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 77 25.372235 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 77 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 78 25.532995 HewlettP_a6:d6:89 NETBIOS- BROWSER Host Announcement RBB-KBRUCE, Workstation, Server, NT Workstation, Potential Browser Frame 78 (180 bytes on wire, 180 bytes captured) IEEE 802.3 Ethernet Logical-Link Control NetBIOS SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 79 25.533881 172.30.48.44 172.30.51.255 BROWSER Host Announcement RBB-KBRUCE, Workstation, Server, NT Workstation, Potential Browser Frame 79 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_a6:d6:89 (00:08:02:a6:d6:89), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.44 (172.30.48.44), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 80 26.002641 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 80 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 81 27.656750 HewlettP_78:fa:06 Broadcast ARP Who has 172.30.48.86? Tell 172.30.51.103 Frame 81 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_78:fa:06 (00:1c:c4:78:fa:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 82 27.657211 HewlettP_78:fa:06 Broadcast ARP Who has 172.30.48.201? Tell 172.30.51.103 Frame 82 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_78:fa:06 (00:1c:c4:78:fa:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 83 27.657769 HewlettP_78:fa:06 Broadcast ARP Who has 172.30.51.108? Tell 172.30.51.103 Frame 83 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_78:fa:06 (00:1c:c4:78:fa:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 84 28.005384 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 84 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 85 28.165512 00000000.0060b06ed002 00000000.ffffffffffff IPX SAP General Query Frame 85 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 86 28.454523 HewlettP_22:be:36 Broadcast ARP Who has 172.30.51.108? Tell 172.30.51.240 Frame 86 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 87 28.862552 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.66? Tell 172.30.51.217 Frame 87 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 88 29.526794 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 88 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 89 29.530237 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 89 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 90 30.003143 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 90 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 91 32.003722 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 91 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 92 33.396903 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.103? Tell 172.30.51.217 Frame 92 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 93 34.023219 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 93 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 94 34.474206 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 94 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 95 34.474554 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 95 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 96 34.474561 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 96 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 97 34.474565 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 97 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 98 34.474920 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 98 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 99 34.474927 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 99 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 100 34.576852 172.30.48.67 255.255.255.255 UDP Source port: 22936 Destination port: 22936 Frame 100 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: Buffalo_99:02:d1 (00:0d:0b:99:02:d1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.67 (172.30.48.67), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 22936 (22936), Dst Port: 22936 (22936) Data (32 bytes) 0000 20 00 00 00 08 00 01 00 20 80 00 00 00 00 00 00 ....... ....... 0010 00 0d 0b 99 02 d1 ff ff ff ff ff ff 00 00 00 00 ................ No. Time Source Destination Protocol Info 101 34.617172 172.30.48.67 255.255.255.255 UDP Source port: 22936 Destination port: 22936 Frame 101 (354 bytes on wire, 354 bytes captured) Ethernet II, Src: Buffalo_99:02:d1 (00:0d:0b:99:02:d1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.67 (172.30.48.67), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 22936 (22936), Dst Port: 22936 (22936) Data (312 bytes) 0000 20 00 00 00 07 00 01 00 20 c0 18 01 00 00 00 00 ....... ....... 0010 00 0d 0b 99 02 d1 ff ff ff ff ff ff 00 00 00 00 ................ 0020 43 30 1e ac 00 fc ff ff 32 00 00 00 00 00 00 00 C0......2....... 0030 43 41 4c 47 41 52 59 4e 41 53 00 00 00 00 00 00 CALGARYNAS...... 0040 42 4d 53 4c 00 00 00 00 00 00 00 00 00 00 00 00 BMSL............ 0050 48 44 2d 48 47 4c 41 4e 28 49 45 4d 49 54 53 55 HD-HGLAN(IEMITSU 0060 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 )............... 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 18 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0130 00 00 00 00 00 00 00 00 ........ No. Time Source Destination Protocol Info 102 36.005956 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 102 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 103 36.737371 HewlettP_f8:56:ad Broadcast ARP Who has 172.30.51.89? Tell 172.30.48.90 Frame 103 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:56:ad (00:0b:cd:f8:56:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 104 36.996364 172.30.48.48 172.30.51.255 BROWSER Host Announcement ZMS-BHALL-SPL, Workstation, Server, SQL Server, NT Workstation, Potential Browser Frame 104 (264 bytes on wire, 264 bytes captured) Ethernet II, Src: 3Com_f2:07:29 (00:04:75:f2:07:29), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.48 (172.30.48.48), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 105 37.095369 00000000.001083271b7d 00000000.ffffffffffff IPX SAP General Query Frame 105 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 106 37.375157 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.32? Tell 172.30.51.217 Frame 106 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 107 37.375159 172.30.51.217 172.30.48.32 DNS Standard query response A 172.30.51.240 Frame 107 (110 bytes on wire, 110 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.217 (172.30.51.217), Dst: 172.30.48.32 (172.30.48.32) User Datagram Protocol, Src Port: domain (53), Dst Port: cap (1026) Domain Name System (response) No. Time Source Destination Protocol Info 108 37.375641 HewlettP_22:be:36 Broadcast ARP Who has 172.30.48.32? Tell 172.30.51.240 Frame 108 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 109 37.375643 172.30.51.240 172.30.48.32 ICMP Echo (ping) reply Frame 109 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Internet Control Message Protocol No. Time Source Destination Protocol Info 110 37.375644 172.30.51.240 172.30.48.32 TCP microsoft-ds > plato-lm [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 Frame 110 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Info 111 37.376047 172.30.51.240 172.30.48.32 ICMP Echo (ping) reply Frame 111 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Internet Control Message Protocol No. Time Source Destination Protocol Info 112 37.376047 172.30.51.240 172.30.48.32 SMB Negotiate Protocol Response Frame 112 (250 bytes on wire, 250 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 1, Ack: 137, Len: 196 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 113 37.377520 172.30.51.240 172.30.48.32 TCP microsoft-ds > plato-lm [ACK] Seq=197 Ack=2971 Win=65535 Len=0 Frame 113 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 197, Ack: 2971, Len: 0 No. Time Source Destination Protocol Info 114 37.378307 172.30.51.240 172.30.48.32 SMB Session Setup AndX Response Frame 114 (404 bytes on wire, 404 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 197, Ack: 2971, Len: 350 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 115 37.378742 172.30.51.240 172.30.48.32 SMB Tree Connect AndX Response Frame 115 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 547, Ack: 3109, Len: 60 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 116 37.379074 172.30.51.240 172.30.48.32 SMB Trans2 Response<unknown> Frame 116 (578 bytes on wire, 578 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 607, Ack: 3185, Len: 524 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 117 37.380877 172.30.51.240 172.30.48.32 SMB Trans2 Response<unknown> Frame 117 (1384 bytes on wire, 1384 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 1131, Ack: 3311, Len: 1330 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 118 37.381398 172.30.51.240 172.30.48.32 SMB Trans2 Response<unknown> Frame 118 (544 bytes on wire, 544 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: HewlettP_d7:c3:98 (00:19:bb:d7:c3:98) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.32 (172.30.48.32) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: plato-lm (1819), Seq: 2461, Ack: 3397, Len: 490 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 119 38.007483 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 119 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 120 38.793780 00000000.00e0f4102410 00000000.ffffffffffff IPX SAP General Response Frame 120 (114 bytes on wire, 114 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 121 39.462425 HewlettP_07:47:a9 Broadcast ARP Who has 172.30.48.205? Tell 172.30.51.15 Frame 121 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_07:47:a9 (00:1e:0b:07:47:a9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 122 39.689672 HewlettP_22:be:36 Broadcast ARP Who has 172.30.48.7? Tell 172.30.51.240 Frame 122 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 123 39.689675 172.30.51.240 172.30.48.7 ICMP Echo (ping) reply Frame 123 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Internet Control Message Protocol No. Time Source Destination Protocol Info 124 39.690489 172.30.51.240 172.30.48.7 TCP microsoft-ds > 4221 [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 Frame 124 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Info 125 39.690490 172.30.51.240 172.30.48.7 ICMP Echo (ping) reply Frame 125 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Internet Control Message Protocol No. Time Source Destination Protocol Info 126 39.691349 172.30.51.240 172.30.48.7 SMB Negotiate Protocol Response Frame 126 (250 bytes on wire, 250 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 1, Ack: 137, Len: 196 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 127 39.693249 172.30.51.240 172.30.48.7 TCP microsoft-ds > 4221 [ACK] Seq=197 Ack=2971 Win=65535 Len=0 Frame 127 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 197, Ack: 2971, Len: 0 No. Time Source Destination Protocol Info 128 39.693907 172.30.51.240 172.30.48.7 SMB Session Setup AndX Response Frame 128 (404 bytes on wire, 404 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 197, Ack: 2971, Len: 350 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 129 39.694917 172.30.51.240 172.30.48.7 SMB Tree Connect AndX Response Frame 129 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 547, Ack: 3109, Len: 60 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 130 39.695534 172.30.51.240 172.30.48.7 SMB Trans2 Response<unknown> Frame 130 (578 bytes on wire, 578 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 607, Ack: 3185, Len: 524 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 131 39.700108 172.30.51.240 172.30.48.7 SMB Trans2 Response<unknown> Frame 131 (1384 bytes on wire, 1384 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 1131, Ack: 3311, Len: 1330 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 132 39.701076 172.30.51.240 172.30.48.7 SMB Trans2 Response<unknown> Frame 132 (544 bytes on wire, 544 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Usi_82:df:b4 (00:1e:37:82:df:b4) Internet Protocol, Src: 172.30.51.240 (172.30.51.240), Dst: 172.30.48.7 (172.30.48.7) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 4221 (4221), Seq: 2461, Ack: 3397, Len: 490 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 133 39.795287 172.30.48.122 172.30.51.255 BROWSER Host Announcement RBB-W5OPS, Workstation, Server, NT Workstation Frame 133 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_e4:74:24 (00:0b:cd:e4:74:24), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.122 (172.30.48.122), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 134 40.008537 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 134 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 135 41.173461 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 135 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 136 41.174984 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 136 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 137 42.008281 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 137 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 138 42.396855 Canon_3d:7f:b9 Broadcast ARP Who has 172.30.51.17? Tell 172.30.51.35 Frame 138 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Canon_3d:7f:b9 (00:00:85:3d:7f:b9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 139 42.398621 Canon_3d:7f:b9 Broadcast ARP Who has 172.30.51.217? Tell 172.30.51.35 Frame 139 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Canon_3d:7f:b9 (00:00:85:3d:7f:b9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 140 43.076309 172.30.51.216 172.30.51.255 BROWSER Host Announcement BF-CAL-P1, Workstation, Server, Print Queue Server, NT Workstation, NT Server, Backup Browser, Unknown server type:25 Frame 140 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.216 (172.30.51.216), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 141 43.165499 00000000.0060b06ed002 00000000.ffffffffffff IPX SAP General Response Frame 141 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 142 43.572486 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 142 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 143 43.572883 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 143 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 144 43.630617 Cisco_64:de:80 Cisco_65:8f:c0 LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0114 Frame 144 (64 bytes on wire, 64 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Data (28 bytes) 0000 00 01 00 01 06 04 00 03 00 02 7e 64 de 80 00 00 ..........~d.... 0010 00 00 00 02 7e 65 8f c0 00 00 00 00 ....~e...... No. Time Source Destination Protocol Info 145 44.006941 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 145 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 146 45.701486 00000000.0010833e1eac 00000000.ffffffffffff IPX SAP General Response Frame 146 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 147 45.712480 172.30.48.179 172.30.51.255 BROWSER Host Announcement RBB-SHEMPLE, Workstation, Server, NT Workstation, Potential Browser Frame 147 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_7b:b6:2e (00:02:a5:7b:b6:2e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.179 (172.30.48.179), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 148 45.736881 HewlettP_f8:56:ad Broadcast ARP Who has 172.30.51.89? Tell 172.30.48.90 Frame 148 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:56:ad (00:0b:cd:f8:56:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 149 45.858206 172.30.51.221 172.30.51.255 BROWSER Host Announcement BF-CAL-M52, Workstation, Server, NT Workstation, NT Server, Backup Browser, Unknown server type:25 Frame 149 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_b3:27:01 (00:0e:7f:b3:27:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.221 (172.30.51.221), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 150 46.007043 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 150 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 151 47.232250 HewlettP_b4:79:ba Broadcast ARP Who has 172.30.51.221? Tell 172.30.51.216 Frame 151 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 152 47.859645 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 152 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 153 47.864578 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 153 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 154 48.007086 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 154 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 155 48.316820 HewlettP_6e:a0:d4 Broadcast ARP Who has 172.30.48.255? Tell 172.30.48.69 Frame 155 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_6e:a0:d4 (00:1c:c4:6e:a0:d4), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 156 48.318827 HewlettP_6e:a0:d4 Broadcast ARP Who has 172.30.51.40? Tell 172.30.48.69 Frame 156 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_6e:a0:d4 (00:1c:c4:6e:a0:d4), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 157 49.687746 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.51.110? Tell 172.30.51.217 Frame 157 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 158 49.701605 00000000.0060b0ccd3aa 00000000.ffffffffffff IPX SAP General Response Frame 158 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 159 50.008556 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 159 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 160 50.726828 172.30.51.87 172.30.51.255 BROWSER Local Master Announcement ARRIVALCLIENT2, Workstation, Server, NT Workstation, Potential Browser, Backup Browser, Master Browser Frame 160 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_87:82:17 (00:1b:78:87:82:17), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.87 (172.30.51.87), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 161 50.987357 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.47? Tell 172.30.51.4 Frame 161 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 162 51.550579 HewlettP_96:df:1f Broadcast ARP Who has 172.30.48.68? Tell 172.30.48.82 Frame 162 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_96:df:1f (00:0b:cd:96:df:1f), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 163 52.007647 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 163 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 164 52.297472 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 164 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 165 52.301014 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 165 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 166 54.007700 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 166 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 167 54.203134 00000000.001b78e7a20e 00000000.ffffffffffff IPX SAP General Response Frame 167 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 168 54.477372 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 168 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 169 54.477386 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 169 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 170 54.477719 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 170 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 171 54.477727 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 171 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 172 54.477731 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 172 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 173 54.477734 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 173 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 174 54.575215 00000000.00e0f41024cc 00000000.ffffffffffff IPX SAP General Response Frame 174 (114 bytes on wire, 114 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 175 56.007972 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 175 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 176 56.682657 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 176 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 177 56.887599 Cisco_0c:89:88 CDP/VTP/DTP/PAgP/UDLD CDP Device ID: CALRBB8-1 Port ID: FastEthernet0/8 Frame 177 (375 bytes on wire, 375 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Cisco Discovery Protocol No. Time Source Destination Protocol Info 178 56.919361 Cisco_0c:89:88 Cisco_0c:89:88 LOOP Reply Frame 178 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_0c:89:88 (00:05:32:0c:89:88), Dst: Cisco_0c:89:88 (00:05:32:0c:89:88) Configuration Test Protocol (loopback) Data (40 bytes) 0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0020 00 00 00 00 00 00 00 00 ........ No. Time Source Destination Protocol Info 179 57.159240 00000000.0010831ad453 00000000.ffffffffffff IPX SAP General Response Frame 179 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 180 57.747139 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.47? Tell 172.30.51.4 Frame 180 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 181 58.008109 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 181 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 182 58.618010 Vmware_b4:16:01 Broadcast ARP Who has 172.30.51.222? Tell 172.30.51.17 Frame 182 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: Vmware_b4:16:01 (00:50:56:b4:16:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 183 59.700714 HewlettP_b4:79:ba Broadcast ARP Who has 172.30.51.85? Tell 172.30.51.216 Frame 183 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 184 59.919286 HewlettP_b4:79:ba Broadcast ARP Who has 172.30.51.219? Tell 172.30.51.216 Frame 184 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 185 60.008058 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 185 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 186 60.428714 172.30.48.26 172.30.51.255 BROWSER Host Announcement RBB-JKYLE, Workstation, Server, NT Workstation, Potential Browser Frame 186 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_5b:66:bb (00:08:02:5b:66:bb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.26 (172.30.48.26), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 187 60.430752 Canon_7e:99:98 Broadcast ARP Who has 172.30.51.4? Tell 172.30.51.66 Frame 187 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Canon_7e:99:98 (00:00:85:7e:99:98), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 188 60.432821 Watchgua_1e:98:30 Broadcast ARP Who has 172.30.51.66? Tell 172.30.51.254 Frame 188 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Watchgua_1e:98:30 (00:90:7f:1e:98:30), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 189 62.009850 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 189 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 190 62.249934 172.30.51.99 172.30.51.255 NBNS Name query NB BF-CAL-D1<20> Frame 190 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: HewlettP_1c:c2:86 (00:1e:0b:1c:c2:86), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.99 (172.30.51.99), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 191 62.249946 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.51.99? Tell 172.30.51.217 Frame 191 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 192 62.251562 172.30.51.66 172.30.51.255 BROWSER Host Announcement IRC6870, Workstation, Server, Print Queue Server, Xenix Server, NT Workstation, NT Server Frame 192 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: Canon_7e:99:98 (00:00:85:7e:99:98), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.66 (172.30.51.66), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 193 62.658508 HewlettP_f8:56:ad Broadcast ARP Who has 172.30.51.89? Tell 172.30.48.90 Frame 193 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:56:ad (00:0b:cd:f8:56:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 194 62.708077 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 194 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 195 62.711588 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 195 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 196 63.347973 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 196 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 197 63.746694 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.47? Tell 172.30.51.4 Frame 197 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 198 63.965998 HewlettP_b4:79:ba Broadcast ARP Who has 172.30.48.68? Tell 172.30.51.216 Frame 198 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 199 64.010146 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 199 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 200 66.012498 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 200 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 201 66.096000 00000000.001083271b7d 00000000.ffffffffffff IPX SAP General Response Frame 201 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 202 66.191155 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.48? Tell 172.30.51.217 Frame 202 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 203 67.719020 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.51.51? Tell 172.30.51.217 Frame 203 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 204 67.739621 00000000.0060b0ae43ed 00000000.ffffffffffff IPX SAP General Response Frame 204 (113 bytes on wire, 113 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Service Advertisement Protocol No. Time Source Destination Protocol Info 205 67.856175 172.30.48.182 172.30.51.255 BROWSER Host Announcement RBB-VDSOUZA, Workstation, Server, NT Workstation Frame 205 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_b6:84:58 (00:1a:4b:b6:84:58), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.182 (172.30.48.182), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 206 68.009096 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 206 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 207 68.088148 HewlettP_22:be:36 Broadcast ARP Who has 172.30.51.221? Tell 172.30.51.240 Frame 207 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_22:be:36 (00:19:bb:22:be:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 208 68.429151 172.30.48.180 172.30.51.255 BROWSER Host Announcement PCC-LSCARFF2, Workstation, Server, NT Workstation Frame 208 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_54:bf:11 (00:1b:78:54:bf:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.180 (172.30.48.180), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 209 69.000540 172.30.40.5 172.30.51.61 SNMP get-request RFC1213-MIB::mib-2.25.3.2.1.5.1 RFC1213-MIB::mib-2.25.3.5.1.1.1 RFC1213-MIB::mib-2.25.3.5.1.2.1 Frame 209 (120 bytes on wire, 120 bytes captured) Ethernet II, Src: Cisco_ca:57:78 (00:1a:e2:ca:57:78), Dst: HewlettP_dc:42:66 (00:14:38:dc:42:66) Internet Protocol, Src: 172.30.40.5 (172.30.40.5), Dst: 172.30.51.61 (172.30.51.61) User Datagram Protocol, Src Port: neod2 (1048), Dst Port: snmp (161) Simple Network Management Protocol No. Time Source Destination Protocol Info 210 69.347815 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 210 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 211 69.477489 HewlettP_07:47:a9 Broadcast ARP Who has 172.30.48.205? Tell 172.30.51.15 Frame 211 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_07:47:a9 (00:1e:0b:07:47:a9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 212 69.746521 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.47? Tell 172.30.51.4 Frame 212 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 213 70.009776 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 213 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 214 70.128039 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 214 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 215 70.131637 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 215 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 216 71.657735 HewlettP_f8:56:ad Broadcast ARP Who has 172.30.51.89? Tell 172.30.48.90 Frame 216 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:56:ad (00:0b:cd:f8:56:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 217 72.011098 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 217 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 218 72.068445 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 218 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 219 72.676475 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 219 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 220 72.680431 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 220 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 221 74.009890 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 221 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 222 74.465477 HewlettP_b4:79:ba Broadcast ARP Who has 172.30.51.222? Tell 172.30.51.216 Frame 222 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:ba (00:0e:7f:b4:79:ba), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 223 74.596341 172.30.48.67 255.255.255.255 UDP Source port: 22936 Destination port: 22936 Frame 223 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: Buffalo_99:02:d1 (00:0d:0b:99:02:d1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.67 (172.30.48.67), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 22936 (22936), Dst Port: 22936 (22936) Data (32 bytes) 0000 20 00 00 00 08 00 01 00 20 80 00 00 00 00 00 00 ....... ....... 0010 00 0d 0b 99 02 d1 ff ff ff ff ff ff 00 00 00 00 ................ No. Time Source Destination Protocol Info 224 74.636557 172.30.48.67 255.255.255.255 UDP Source port: 22936 Destination port: 22936 Frame 224 (354 bytes on wire, 354 bytes captured) Ethernet II, Src: Buffalo_99:02:d1 (00:0d:0b:99:02:d1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.67 (172.30.48.67), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 22936 (22936), Dst Port: 22936 (22936) Data (312 bytes) 0000 20 00 00 00 07 00 01 00 20 c0 18 01 00 00 00 00 ....... ....... 0010 00 0d 0b 99 02 d1 ff ff ff ff ff ff 00 00 00 00 ................ 0020 43 30 1e ac 00 fc ff ff 32 00 00 00 00 00 00 00 C0......2....... 0030 43 41 4c 47 41 52 59 4e 41 53 00 00 00 00 00 00 CALGARYNAS...... 0040 42 4d 53 4c 00 00 00 00 00 00 00 00 00 00 00 00 BMSL............ 0050 48 44 2d 48 47 4c 41 4e 28 49 45 4d 49 54 53 55 HD-HGLAN(IEMITSU 0060 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 )............... 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 18 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0130 00 00 00 00 00 00 00 00 ........ No. Time Source Destination Protocol Info 225 75.347748 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 225 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 226 75.473986 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 226 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 227 75.473998 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 227 (293 bytes on wire, 293 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 228 75.474002 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 228 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 229 75.474320 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 229 (292 bytes on wire, 292 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 230 75.474327 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 230 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 231 75.474331 172.30.51.69 239.255.255.250 SSDP NOTIFY * HTTP/1.1 Frame 231 (299 bytes on wire, 299 bytes captured) Ethernet II, Src: D-Link_db:75:c7 (00:13:46:db:75:c7), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 172.30.51.69 (172.30.51.69), Dst: 239.255.255.250 (239.255.255.250) User Datagram Protocol, Src Port: ssdp (1900), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time Source Destination Protocol Info 232 75.704192 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 232 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 233 75.707698 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 233 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 234 76.011248 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 234 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 235 77.808933 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 235 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 236 77.808937 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.39? Tell 172.30.51.58 Frame 236 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 237 77.809348 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 237 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 238 77.809350 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.41? Tell 172.30.51.58 Frame 238 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 239 77.809723 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.43? Tell 172.30.51.58 Frame 239 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 240 77.809724 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.44? Tell 172.30.51.58 Frame 240 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 241 77.810126 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.46? Tell 172.30.51.58 Frame 241 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 242 78.009848 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 242 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 243 78.068269 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 243 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 244 79.768580 HewlettP_b3:27:01 Broadcast ARP Who has 172.30.51.16? Tell 172.30.51.221 Frame 244 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b3:27:01 (00:0e:7f:b3:27:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 245 80.009957 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 245 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 246 80.245093 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.52? Tell 172.30.51.217 Frame 246 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 247 82.010535 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 247 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 248 82.766864 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 248 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 249 83.666128 172.30.48.68 172.30.51.255 BROWSER Host Announcement RBB-RECEPTION17, Workstation, Server, NT Workstation, Potential Browser Frame 249 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: HewlettP_43:e6:c7 (00:08:02:43:e6:c7), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.68 (172.30.48.68), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 250 83.667028 HewlettP_43:e6:c7 NETBIOS- BROWSER Host Announcement RBB-RECEPTION17, Workstation, Server, NT Workstation, Potential Browser Frame 250 (180 bytes on wire, 180 bytes captured) IEEE 802.3 Ethernet Logical-Link Control NetBIOS SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 251 83.767858 172.30.48.95 172.30.51.255 BROWSER Host Announcement RBB-BHW5, Workstation, Server, NT Workstation Frame 251 (269 bytes on wire, 269 bytes captured) Ethernet II, Src: HewlettP_5b:2d:24 (00:19:bb:5b:2d:24), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.48.95 (172.30.48.95), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 252 83.894872 Vmware_b4:0f:ae Broadcast ARP Who has 172.30.51.75? Tell 172.30.51.109 Frame 252 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: Vmware_b4:0f:ae (00:50:56:b4:0f:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 253 84.010586 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 253 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 254 84.748277 172.30.51.187 172.30.51.255 BROWSER Host Announcement APOGEEWS, Workstation, Server, NT Workstation, Potential Browser Frame 254 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: AcctonTe_b5:76:ad (00:10:b5:b5:76:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 172.30.51.187 (172.30.51.187), Dst: 172.30.51.255 (172.30.51.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 255 85.353588 Cisco_95:fe:84 Broadcast ARP Who has 172.30.51.40? Tell 172.30.51.58 Frame 255 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 256 85.357111 Cisco_95:fe:84 Broadcast ARP Who has 172.30.48.93? Tell 172.30.51.58 Frame 256 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_95:fe:84 (00:1b:d5:95:fe:84), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 257 85.466098 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.48.207? Tell 172.30.51.4 Frame 257 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 258 85.685013 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.48.206? Tell 172.30.51.4 Frame 258 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 259 85.685016 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.48.208? Tell 172.30.51.4 Frame 259 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 260 86.010758 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 260 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 261 87.665425 HewlettP_78:fa:06 Broadcast ARP Who has 172.30.51.106? Tell 172.30.51.103 Frame 261 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_78:fa:06 (00:1c:c4:78:fa:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 262 87.665949 HewlettP_78:fa:06 Broadcast ARP Who has 172.30.51.104? Tell 172.30.51.103 Frame 262 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_78:fa:06 (00:1c:c4:78:fa:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 263 87.665951 HewlettP_78:fa:06 Broadcast ARP Who has 172.30.51.102? Tell 172.30.51.103 Frame 263 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_78:fa:06 (00:1c:c4:78:fa:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 264 87.739335 HewlettP_78:fa:06 Broadcast ARP Who has 172.30.51.190? Tell 172.30.51.103 Frame 264 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_78:fa:06 (00:1c:c4:78:fa:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 265 88.011702 Cisco_62:4d:2d Spanning-tree-(for-bridges)_00 STP Conf. Root = 32768/00:02:4b:71:f0:00 Cost = 208 Port = 0x802d Frame 265 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Info 266 88.688917 HewlettP_f8:56:ad Broadcast ARP Who has 172.30.51.89? Tell 172.30.48.90 Frame 266 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_f8:56:ad (00:0b:cd:f8:56:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 267 88.747948 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.48.207? Tell 172.30.51.4 Frame 267 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 268 88.766606 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.51.25? Tell 172.30.51.4 Frame 268 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 269 88.859074 HewlettP_b4:79:7b Broadcast ARP Who has 172.30.48.159? Tell 172.30.51.217 Frame 269 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: HewlettP_b4:79:7b (00:0e:7f:b4:79:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 270 88.968140 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.48.208? Tell 172.30.51.4 Frame 270 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 271 88.968142 Cisco_fd:ef:01 Broadcast ARP Who has 172.30.48.206? Tell 172.30.51.4 Frame 271 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_fd:ef:01 (00:1c:58:fd:ef:01), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request)
- Follow-Ups:
- Re: [Wireshark-users] capture
- From: Abhik Sarkar
- Re: [Wireshark-users] capture
- Prev by Date: [Wireshark-users] FIND_FIRST2 not being parsed correctly?
- Next by Date: Re: [Wireshark-users] capture
- Previous by thread: [Wireshark-users] FIND_FIRST2 not being parsed correctly?
- Next by thread: Re: [Wireshark-users] capture
- Index(es):