List 6　Active Directoryドメインに所属するWindows NT 4.0クライアントからWindows NTドメインのリソースにアクセスした場合のトレース

---

1  PC98-D   LILY      NBT NS: Query req. for NT40SV-1
2  LILY     PC98-D    NBT NS: Query (Node Status) resp. for NT40SV-1, Success
3  PC98-D   *BRDCST   ARP_RARP ARP: Request, Target IP: 192.168.1.20
4  NT40SV-1 PC98-D    ARP_RARP ARP: Reply, Target IP: 192.168.1.13 Target Hdwr Addr: xxxxxxxxxxxx
5  PC98-D   NT40SV-1  TCP ....S., len:    0, seq:4185999226-4185999226, ack:         0, win: 8192, src: 1088  dst:  139 (NBT Session)
6  NT40SV-1 PC98-D    TCP .A..S., len:    0, seq:     70798-70798, ack:4185999227, win: 8760, src:  139 (NBT Session)  dst: 1088
7  PC98-D   NT40SV-1  TCP .A...., len:    0, seq:4185999227-4185999227, ack:     70799, win: 8760, src: 1088  dst:  139 (NBT Session)
8  PC98-D   NT40SV-1  NBT SS: Session Request, Dest: NT40SV-1        , Source: PC98-D         <00>, Len: 68
9  NT40SV-1 PC98-D    NBT SS: Positive Session Response, Len: 0
10 PC98-D   NT40SV-1  SMB C negotiate, Dialect = NT LM 0.12
11 NT40SV-1 PC98-D    SMB R negotiate, Dialect # = 7
12 PC98-D   NT40SV-1  SMB C session setup & X, Username = , and C tree connect & X, Share = \\NT40SV-1\IPC$
13 NT40SV-1 PC98-D    SMB R session setup & X, and R tree connect & X, Type = IPC
14 PC98-D   NT40SV-1  SMB C session setup & X, Username = xxxxxxx, and C tree connect & X, Share = \\NT40SV-1\SHARE
15 NT40SV-1 LILY      SMB C NT create & X, File = \NETLOGON NT40SV-1
16 LILY     NT40SV-1  SMB R NT create & X, FID = 0x400b
17 NT40SV-1 LILY      MSRPC c/o RPC Bind:         UUID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx  call 0x0  assoc grp 0x0  xmit 0x1630  recv 0x1630
18 LILY     NT40SV-1  MSRPC c/o RPC Bind Ack:     call 0x0  assoc grp 0xDD37  xmit 0x10B8  recv 0x10B8
19 NT40SV-1 LILY      R_LOGON RPC Client call logon:NetrLogonSamLogon(..)
20 LILY     NT40SV-1  R_LOGON RPC Server response logon:NetrLogonSamLogon(..)
21 NT40SV-1 PC98-D    SMB R session setup & X, and R tree connect & X, Type = ・
22 NT40SV-1 LILY      TCP .A...., len:    0, seq:     83129-83129, ack:3739733496, win: 8136, src: 1039  dst:  139 (NBT Session)
23 PC98-D   NT40SV-1  TCP .A...., len:    0, seq:4185999918-4185999918, ack:     71198, win: 8361, src: 1088  dst:  139 (NBT Session)