List 2 Windows 2000のドメインコントローラが動作している場合にWindows NT 4.0クライアントからログオンしたときのトレース
1 PC98-D LILY NBT NS: MultiHomed Name Registration req. for PC98-D <00>
2 LILY PC98-D NBT NS: Registration (Node Status) resp. for PC98-D <00>, Success, Owner Addr. 192.168.1.13
3 PC98-D LILY NBT NS: Registration req. for ACTIVE <00>
4 LILY PC98-D NBT NS: Registration (Node Status) resp. for ACTIVE <00>, Success, Owner Addr. 192.168.1.13
5 PC98-D LILY NBT NS: Query req. for ACTIVE <1B>
6 LILY PC98-D NBT NS: Query (Node Status) resp. for ACTIVE <1B>, Success
NBT: NS: Query (Node Status) resp. for ACTIVE <1B>, Success
NBT: Transaction ID = 32774 (0x8006)
NBT: Flags Summary = 0x8580 - Resp.; Query; Success
NBT: 1............... = Response
NBT: .0000........... = Query
NBT: .....1.......... = Authoritative Answer
NBT: ......0......... = Datagram not truncated
NBT: .......1........ = Recursion desired
NBT: ........1....... = Recursion available
NBT: .........0...... = Reserved
NBT: ..........0..... = Reserved
NBT: ...........0.... = Not a broadcast packet
NBT: ............0000 = Success
NBT: Question Count = 0 (0x0)
NBT: Answer Count = 1 (0x1)
NBT: Name Service Count = 0 (0x0)
NBT: Additional Record Count = 0 (0x0)
NBT: Resource Record Name = ACTIVE <1B>
NBT: Resource Record Type = NetBIOS General Name Service
NBT: Resource Record Class = Internet Class
NBT: Time To Live(Milliseconds) = 0 (0x0)
NBT: RDATA Length = 6 (0x6)
NBT: Resource Record Flags = 24576 (0x6000)
NBT: 0............... = Unique NetBIOS Name
NBT: .00............. = B Node
NBT: ...0000000000000 = Reserved
NBT: Owner IP Address = 192.168.1.1
7 PC98-D LILY Netlogon Query for Primary DC
8 LILY PC98-D Netlogon Response to Primary Query
9 PC98-D LILY NBT NS: Query req. for LILY
10 LILY PC98-D NBT NS: Query (Node Status) resp. for LILY, Success
11 PC98-D LILY TCP ....S., len: 0, seq:2096112122-2096112122, ack: 0, win: 8192, src: 1025 dst: 139 (NBT Session)
12 LILY PC98-D TCP .A..S., len: 0, seq:2775741970-2775741970, ack:2096112123, win:17520, src: 139 (NBT Session) dst: 1025
13 PC98-D LILY TCP .A...., len: 0, seq:2096112123-2096112123, ack:2775741971, win: 8760, src: 1025 dst: 139 (NBT Session)
14 PC98-D LILY NBT SS: Session Request, Dest: LILY , Source: PC98-D <00>, Len: 68
15 LILY PC98-D NBT SS: Positive Session Response, Len: 0
16 PC98-D LILY SMB C negotiate, Dialect = NT LM 0.12
17 LILY PC98-D SMB R negotiate, Dialect # = 7
18 PC98-D LILY SMB C session setup & X, Username = , and C tree connect & X, Share = \\LILY\IPC$
19 LILY PC98-D SMB R session setup & X, and R tree connect & X, Type = IPC
20 PC98-D LILY SMB C transact2 NT Get DFS Referral
21 LILY PC98-D SMB R transact2 NT Get DFS Referral (response to frame 57)
22 PC98-D LILY TCP .A...., len: 0, seq:2096112623-2096112623, ack:2775742736, win: 7995, src: 1025 dst: 139 (NBT Session)
23 PC98-D LILY NBT NS: Query req. for ACTIVE <1C>
24 LILY PC98-D NBT NS: Query (Node Status) resp. for ACTIVE <1C>, Success
NBT: NS: Query (Node Status) resp. for ACTIVE <1C>, Success
NBT: Transaction ID = 32780 (0x800C)
NBT: Flags Summary = 0x8580 - Resp.; Query; Success
NBT: 1............... = Response
NBT: .0000........... = Query
NBT: .....1.......... = Authoritative Answer
NBT: ......0......... = Datagram not truncated
NBT: .......1........ = Recursion desired
NBT: ........1....... = Recursion available
NBT: .........0...... = Reserved
NBT: ..........0..... = Reserved
NBT: ...........0.... = Not a broadcast packet
NBT: ............0000 = Success
NBT: Question Count = 0 (0x0)
NBT: Answer Count = 1 (0x1)
NBT: Name Service Count = 0 (0x0)
NBT: Additional Record Count = 0 (0x0)
NBT: Resource Record Name = ACTIVE <1C>
NBT: Resource Record Type = NetBIOS General Name Service
NBT: Resource Record Class = Internet Class
NBT: Time To Live(Milliseconds) = 0 (0x0)
NBT: RDATA Length = 24 (0x18)
NBT: Resource Record Flags = 32768 (0x8000)
NBT: 1............... = Group NetBIOS Name
NBT: .00............. = B Node
NBT: ...0000000000000 = Reserved
NBT: Owner IP Address = 192.168.1.1
NBT: Resource Record Flags = 32768 (0x8000)
NBT: 1............... = Group NetBIOS Name
NBT: .00............. = B Node
NBT: ...0000000000000 = Reserved
NBT: Owner IP Address = 192.168.1.1
NBT: Resource Record Flags = 32768 (0x8000)
NBT: 1............... = Group NetBIOS Name
NBT: .00............. = B Node
NBT: ...0000000000000 = Reserved
NBT: Owner IP Address = 192.168.1.23
NBT: Resource Record Flags = 32768 (0x8000)
NBT: 1............... = Group NetBIOS Name
NBT: .00............. = B Node
NBT: ...0000000000000 = Reserved
NBT: Owner IP Address = 192.168.1.21
25 PC98-D *BRDCST Netlogon SAM LOGON request from client 192.168.1.13 192.168.1.255
26 PC98-D LILY Netlogon SAM LOGON request from client
27 NT40SV-2 *BRDCST ARP_RARP ARP: Request, Target IP: 192.168.1.13
28 PC98-D NT40SV-2 ARP_RARP ARP: Reply, Target IP: 192.168.1.21 Target Hdwr Addr: xxxxxxxxxxxx
29 NT40SV-2 PC98-D Netlogon SAM Response to SAM LOGON request 192.168.1.21 192.168.1.13
30 PC98-D LILY NBT NS: Query req. for NT40SV-2
31 LILY PC98-D NBT NS: Query (Node Status) resp. for NT40SV-2, Success
32 PC98-D NT40SV-2 TCP ....S., len: 0, seq:2096237988-2096237988, ack: 0, win: 8192, src: 1026 dst: 139 (NBT Session)
33 NT40SV-2 PC98-D TCP .A..S., len: 0, seq: 65561-65561, ack:2096237989, win: 8760, src: 139 (NBT Session) dst: 1026
34 PC98-D NT40SV-2 TCP .A...., len: 0, seq:2096237989-2096237989, ack: 65562, win: 8760, src: 1026 dst: 139 (NBT Session)
35 PC98-D NT40SV-2 NBT SS: Session Request, Dest: NT40SV-2 , Source: PC98-D <00>, Len: 68
36 NT40SV-2 PC98-D NBT SS: Positive Session Response, Len: 0
37 PC98-D NT40SV-2 SMB C negotiate, Dialect = NT LM 0.12
38 NT40SV-2 PC98-D SMB R negotiate, Dialect # = 7
39 PC98-D NT40SV-2 SMB C session setup & X, Username = , and C tree connect & X, Share = \\NT40SV-2\IPC$
40 NT40SV-2 PC98-D SMB R session setup & X, and R tree connect & X, Type = IPC
41 PC98-D NT40SV-2 SMB C NT create & X, File = \lsarpc
42 NT40SV-2 PC98-D SMB R NT create & X, FID = 0x800
43 LILY PC98-D Netlogon SAM Response to SAM LOGON request
44 PC98-D NT40SV-2 MSRPC c/o RPC Bind: UUID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx call 0x5 assoc grp 0x0 xmit 0x1630 recv 0x1630
45 NT40SV-2 PC98-D MSRPC c/o RPC Bind Ack: call 0x5 assoc grp 0x9B03 xmit 0x1630 recv 0x1630
46 PC98-D NT40SV-2 R_LSARPC RPC Client call lsarpc:LsarOpenPolicy2(..)
47 NT40SV-2 PC98-D R_LSARPC RPC Server response lsarpc:LsarOpenPolicy2(..)
48 PC98-D NT40SV-2 R_LSARPC RPC Client call lsarpc:LsarEnumerateTrustedDomains(..)
49 NT40SV-2 PC98-D R_LSARPC RPC Server response lsarpc:LsarEnumerateTrustedDomains(..)
50 PC98-D NT40SV-2 R_LSARPC RPC Client call lsarpc:LsarEnumerateTrustedDomains(..)
51 NT40SV-2 PC98-D R_LSARPC RPC Server response lsarpc:LsarEnumerateTrustedDomains(..)
52 PC98-D NT40SV-2 R_LSARPC RPC Client call lsarpc:LsarClose(..)
53 NT40SV-2 PC98-D R_LSARPC RPC Server response lsarpc:LsarClose(..)
54 PC98-D NT40SV-2 SMB C close file, FID = 0x800
55 NT40SV-2 PC98-D SMB R close file
56 PC98-D NT40SV-2 SMB C NT create & X, File = \NETLOGON
57 NT40SV-2 PC98-D SMB R NT create & X, FID = 0x801
58 PC98-D NT40SV-2 MSRPC c/o RPC Bind: UUID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx call 0x4 assoc grp 0x0 xmit 0x1630 recv 0x1630
59 NT40SV-2 PC98-D MSRPC c/o RPC Bind Ack: call 0x4 assoc grp 0x9B04 xmit 0x1630 recv 0x1630
60 PC98-D NT40SV-2 R_LOGON RPC Client call logon:NetrServerReqChallenge(..)
61 NT40SV-2 PC98-D R_LOGON RPC Server response logon:NetrServerReqChallenge(..)
62 PC98-D NT40SV-2 R_LOGON RPC Client call logon:NetrServerAuthenticate2(..)
63 NT40SV-2 PC98-D R_LOGON RPC Server response logon:NetrServerAuthenticate2(..)