List 2 Windows NT 4.0クライアントから同じドメインツリーのほかのドメインへとアクセスした場合のトレース

1  PC98-D  LILY    DNS 0x1:Std Qry for W2K-3.SUBDOMAIN.ACTIVE.DSL.LOCAL. of type Host Addr on class INET addr.

2  LILY    PC98-D  DNS 0x1:Std Qry Resp. for W2K-3.SUBDOMAIN.ACTIVE.DSL.LOCAL. of type Host Addr on class INET addr.

3  PC98-D  *BRDCST ARP_RARP ARP: Request, Target IP: 192.168.1.24      

4  W2K-3   PC98-D  ARP_RARP ARP: Reply, Target IP: 192.168.1.13 Target Hdwr Addr: xxxxxxxxxxxx

5  PC98-D  W2K-3   ICMP Echo: From 192.168.1.13 To 192.168.1.24

6  W2K-3   PC98-D  ICMP Echo Reply: To 192.168.1.13 From 192.168.1.24

7  PC98-D  W2K-3   TCP ....S., len:    0, seq: 806382361-806382361, ack:         0, win: 8192, src: 1088  dst:  139 (NBT Session)

8  W2K-3   PC98-D  TCP .A..S., len:    0, seq:2528285784-2528285784, ack: 806382362, win:17520, src:  139 (NBT Session)  dst: 1088

9  PC98-D  W2K-3   TCP .A...., len:    0, seq: 806382362-806382362, ack:2528285785, win: 8760, src: 1088  dst:  139 (NBT Session)

10 PC98-D  W2K-3   NBT SS: Session Request, Dest: W2K-3           , Source: PC98-D         <00>, Len: 68

11 W2K-3   PC98-D  NBT SS: Positive Session Response, Len: 0

12 PC98-D  W2K-3   SMB C negotiate, Dialect = NT LM 0.12

13 W2K-3   PC98-D  SMB R negotiate, Dialect # = 7

14 PC98-D  W2K-3   SMB C session setup & X, Username = , and C tree connect & X, Share = \\W2K-3.SUBDOMAIN.ACTIVE.DSL.LOCAL\IPC$

15 W2K-3   PC98-D  SMB R session setup & X, and R tree connect & X, Type=IPC

16 PC98-D  W2K-3   SMB C transact2 NT Get DFS Referral

17 W2K-3   PC98-D  SMB R transact2 - NT error, System, Error, Code = (14) STATUS_NO_SUCH_DEVICE

18 PC98-D  W2K-3   SMB C session setup & X, Username = xxxxxxx, and C tree connect & X, Share = \\W2K-3.SUBDOMAIN.ACTIVE.DSL.LOCAL\SHARE

19 W2K-3   LILY    TCP ....S., len:    0, seq:2528456396-2528456396, ack:         0, win:16384, src: 1886  dst:  135

20 LILY    W2K-3   TCP .A..S., len:    0, seq:4012473429-4012473429, ack:2528456397, win:17520, src:  135  dst: 1886

21 W2K-3   LILY    TCP .A...., len:    0, seq:2528456397-2528456397, ack:4012473430, win:17520, src: 1886  dst:  135

22 W2K-3   LILY    MSRPC c/o RPC Bind:         UUID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx  call 0x1  assoc grp 0x0  xmit 0x16D0  recv 0x16D0

23 LILY    W2K-3   MSRPC c/o RPC Bind Ack:     call 0x1  assoc grp 0xEC38  xmit 0x16D0  recv 0x16D0

24 W2K-3   LILY    MSRPC c/o RPC Request:      call 0x1  opnum 0x3  context 0x0  hint 0x84

25 LILY    W2K-3   MSRPC c/o RPC Response:     call 0x1  context 0x0  hint 0x80  cancels 0x0

26 W2K-3   LILY    TCP .A...F, len:    0, seq:2528456625-2528456625, ack:4012473642, win:17308, src: 1886  dst:  135

27 LILY    W2K-3   TCP .A...., len:    0, seq:4012473642-4012473642, ack:2528456626, win:17292, src:  135  dst: 1886

28 LILY    W2K-3   TCP .A...F, len:    0, seq:4012473642-4012473642, ack:2528456626, win:17292, src:  135  dst: 1886

29 W2K-3   LILY    TCP .A...., len:    0, seq:2528456626-2528456626, ack:4012473643, win:17308, src: 1886  dst:  135

30 W2K-3   LILY    TCP ....S., len:    0, seq:2528495826-2528495826, ack:         0, win:16384, src: 1887  dst: 1026

31 LILY    W2K-3   TCP .A..S., len:    0, seq:4012523393-4012523393, ack:2528495827, win:17520, src: 1026  dst: 1887

32 W2K-3   LILY    TCP .A...., len:    0, seq:2528495827-2528495827, ack:4012523394, win:17520, src: 1887  dst: 1026

33 W2K-3   LILY    MSRPC c/o RPC Bind:         UUID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx  call 0x1  assoc grp 0x0  xmit 0x16D0  recv 0x16D0

34 LILY    W2K-3   MSRPC c/o RPC Bind Ack:     call 0x1  assoc grp 0xE455  xmit 0x16D0  recv 0x16D0

35 W2K-3   LILY    R_LOGON RPC Client call logon:NetrLogonSamLogon(..)

36 LILY    W2K-3   R_LOGON RPC Server response logon:NetrLogonSamLogon(..)

37 W2K-3   PC98-D  SMB R session setup & X, and R tree connect & X, Type = A:

38 W2K-3   LILY    TCP .A...., len:    0, seq:2528496369-2528496369, ack:4012523890, win:17024, src: 1887  dst: 1026

39 PC98-D  W2K-3   TCP .A...., len:    0, seq: 806383303-806383303, ack:2528286257, win: 8288, src: 1088  dst:  139 (NBT Session)