List 6 Windows NT 4.0クライアントから異なるフォレストに所属するドメインへとアクセスした場合のトレース

1  PC98-D  LILY    DNS 0x1:Std Qry for W2K-5.OTHERFOREST.DSL.LOCAL. of type Host Addr on class INET addr.

2  LILY    PC98-D  DNS 0x1:Std Qry Resp. for W2K-5.OTHERFOREST.DSL.LOCAL. of type Host Addr on class INET addr.

3  PC98-D  *BRDCST ARP_RARP ARP: Request, Target IP: 192.168.1.26

4  W2K-5   PC98-D  ARP_RARP ARP: Reply, Target IP: 192.168.1.13 Target Hdwr Addr: xxxxxxxxxxxx

5  PC98-D  W2K-5   ICMP Echo: From 192.168.1.13 To 192.168.1.26

6  W2K-5   PC98-D  ICMP Echo Reply: To 192.168.1.13 From 192.168.01.26

7  PC98-D  W2K-5   TCP ....S., len:    0, seq:4290619710-4290619710, ack:         0, win: 8192, src: 1088  dst:  139 (NBT Session)

8  W2K-5   PC98-D  TCP .A..S., len:    0, seq:2486437689-2486437689, ack:4290619711, win:17520, src:  139 (NBT Session)  dst: 1088

9  PC98-D  W2K-5   TCP .A...., len:    0, seq:4290619711-4290619711, ack:2486437690, win: 8760, src: 1088  dst:  139 (NBT Session)

10 PC98-D  W2K-5   NBT SS: Session Request, Dest: W2K-5           , Source: PC98-D         <00>, Len: 68

11 W2K-5   PC98-D  NBT SS: Positive Session Response, Len: 0 W2K-5

12 PC98-D  W2K-5   SMB C negotiate, Dialect = NT LM 0.12

13 W2K-5   PC98-D  SMB R negotiate, Dialect # = 7

14 PC98-D  W2K-5   SMB C session setup & X, Username = , and C tree connect & X, Share = \\W2K-5.OTHERFOREST.DSL.LOCAL\IPC$

15 W2K-5   PC98-D  SMB R session setup & X, and R tree connect & X, Type = IPC

16 PC98-D  W2K-5   SMB C transact2 NT Get DFS Referral

17 W2K-5   PC98-D  SMB R transact2 - NT error, System, Error, Code = (14) STATUS_NO_SUCH_DEVICE

18 PC98-D  W2K-5   SMB C session setup & X, Username = xxxxxxx, and C tree connect & X, Share = \\W2K-5.OTHERFOREST.DSL.LOCAL\SHARE

19 W2K-5   LILY    TCP ....S., len:    0, seq:2486589969-2486589969, ack:         0, win:16384, src: 1814  dst:  135

20 LILY    W2K-5   TCP .A..S., len:    0, seq:2575212627-2575212627, ack:2486589970, win:17520, src:  135  dst: 1814

21 W2K-5   LILY    TCP .A...., len:    0, seq:2486589970-2486589970, ack:2575212628, win:17520, src: 1814  dst:  135

22 W2K-5   LILY    MSRPC c/o RPC Bind:         UUID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx  call 0x1  assoc grp 0x0  xmit 0x16D0  recv 0x16D0

23 LILY    W2K-5   MSRPC c/o RPC Bind Ack:     call 0x1  assoc grp 0xEE53  xmit 0x16D0  recv 0x16D0

24 W2K-5   LILY    MSRPC c/o RPC Request:      call 0x1  opnum 0x3  context 0x0  hint 0x84

25 LILY    W2K-5   MSRPC c/o RPC Response:     call 0x1  context 0x0  hint 0x80  cancels 0x0

26 W2K-5   LILY    TCP .A...F, len:    0, seq:2486590198-2486590198, ack:2575212840, win:17308, src: 1814  dst:  135

27 LILY    W2K-5   TCP .A...., len:    0, seq:2575212840-2575212840, ack:2486590199, win:17292, src:  135  dst: 1814

28 LILY    W2K-5   TCP .A...F, len:    0, seq:2575212840-2575212840, ack:2486590199, win:17292, src:  135  dst: 1814

29 W2K-5   LILY    TCP .A...., len:    0, seq:2486590199-2486590199, ack:2575212841, win:17308, src: 1814  dst:  135

30 W2K-5   LILY    TCP ....S., len:    0, seq:2486623435-2486623435, ack:         0, win:16384, src: 1815  dst: 1026

31 LILY    W2K-5   TCP .A..S., len:    0, seq:2575273097-2575273097, ack:2486623436, win:17520, src: 1026  dst: 1815

32 W2K-5   LILY    TCP .A...., len:    0, seq:2486623436-2486623436, ack:2575273098, win:17520, src: 1815  dst: 1026

33 W2K-5   LILY    MSRPC c/o RPC Bind:         UUID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx  call 0x1  assoc grp 0x0  xmit 0x16D0  recv 0x16D0

34 LILY    W2K-5   MSRPC c/o RPC Bind Ack:     call 0x1  assoc grp 0xE4AD  xmit 0x16D0  recv 0x16D0

35 W2K-5   LILY    R_LOGON RPC Client call logon:NetrLogonSamLogon(..)

36 LILY    W2K-5   R_LOGON RPC Server response logon:NetrLogonSamLogon(..)

37 W2K-5   PC98-D  SMB R session setup & X, and R tree connect & X, Type = A:

38 W2K-5   LILY    TCP .A...., len:    0, seq:2486623978-2486623978, ack:2575273594, win:17024, src: 1815  dst: 1026

39 PC98-D  W2K-5   TCP .A...., len:    0, seq:4290620622-4290620622, ack:2486438174, win: 8276, src: 1088  dst:  139 (NBT Session)