No. Time Source Destination Protocol Info 1 0.000000 192.168.0.103 192.168.0.190 NBSS Session keep-alive Frame 1 (60 bytes on wire, 60 bytes captured) Arrival Time: Nov 30, 2005 20:54:01.052428000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 60 bytes Capture Length: 60 bytes Protocols in frame: eth:ip:tcp:nbss Ethernet II, Src: Microsof_64:96:08 (00:0d:3a:64:96:08), Dst: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Destination: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Source: Microsof_64:96:08 (00:0d:3a:64:96:08) Type: IP (0x0800) Trailer: 0000 Internet Protocol, Src: 192.168.0.103 (192.168.0.103), Dst: 192.168.0.190 (192.168.0.190) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 44 Identification: 0x9fc3 (40899) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x5893 [correct] Good: True Bad : False Source: 192.168.0.103 (192.168.0.103) Destination: 192.168.0.190 (192.168.0.190) Transmission Control Protocol, Src Port: 1024 (1024), Dst Port: netbios-ssn (139), Seq: 0, Ack: 0, Len: 4 Source port: 1024 (1024) Destination port: netbios-ssn (139) Sequence number: 0 (relative sequence number) Next sequence number: 4 (relative sequence number) Acknowledgement number: 0 (relative ack number) Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 63822 Checksum: 0x7c02 [correct] NetBIOS Session Service Message Type: Session keep-alive Flags: 0x00 .... ...0 = Add 0 to length Length: 0 No. Time Source Destination Protocol Info 2 0.000441 192.168.0.103 192.168.0.190 SMB Trans2 Request, FIND_FIRST2, Pattern: Musique\\* Frame 2 (160 bytes on wire, 160 bytes captured) Arrival Time: Nov 30, 2005 20:54:01.052869000 Time delta from previous packet: 0.000441000 seconds Time since reference or first frame: 0.000441000 seconds Frame Number: 2 Packet Length: 160 bytes Capture Length: 160 bytes Protocols in frame: eth:ip:tcp:nbss:smb Ethernet II, Src: Microsof_64:96:08 (00:0d:3a:64:96:08), Dst: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Destination: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Source: Microsof_64:96:08 (00:0d:3a:64:96:08) Type: IP (0x0800) Internet Protocol, Src: 192.168.0.103 (192.168.0.103), Dst: 192.168.0.190 (192.168.0.190) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 146 Identification: 0x9fc4 (40900) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x582c [correct] Good: True Bad : False Source: 192.168.0.103 (192.168.0.103) Destination: 192.168.0.190 (192.168.0.190) Transmission Control Protocol, Src Port: 1024 (1024), Dst Port: netbios-ssn (139), Seq: 4, Ack: 0, Len: 106 Source port: 1024 (1024) Destination port: netbios-ssn (139) Sequence number: 4 (relative sequence number) Next sequence number: 110 (relative sequence number) Acknowledgement number: 0 (relative ack number) Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 63822 Checksum: 0xf65e [correct] NetBIOS Session Service Message Type: Session message Flags: 0x00 .... ...0 = Add 0 to length Length: 102 SMB (Server Message Block Protocol) SMB Header Server Component: SMB Response in: 4 SMB Command: Trans2 (0x32) Error Class: Success (0x00) Reserved: 00 Error Code: No Error Flags: 0x08 0... .... = Request/Response: Message is a request to the server .0.. .... = Notify: Notify client only on open ..0. .... = Oplocks: OpLock not requested/granted ...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized .... 1... = Case Sensitivity: Path names are caseless .... ..0. = Receive Buffer Posted: Receive buffer has not been posted .... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported Flags2: 0x8801 1... .... .... .... = Unicode Strings: Strings are Unicode .0.. .... .... .... = Error Code Type: Error codes are DOS error codes ..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only ...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs .... 1... .... .... = Extended Security Negotiation: Extended security negotiation is supported .... .... .0.. .... = Long Names Used: Path names in request are not long file names .... .... .... .0.. = Security Signatures: Security signatures are not supported .... .... .... ..0. = Extended Attributes: Extended attributes are not supported .... .... .... ...1 = Long Names Allowed: Long file names are allowed in the response Process ID High: 0 Signature: 0000000000000000 Reserved: 0000 Tree ID: 1 Process ID: 1 User ID: 0 Multiplex ID: 64 Trans2 Request (0x32) Word Count (WCT): 15 Total Parameter Count: 34 Total Data Count: 0 Max Parameter Count: 10 Max Data Count: 2920 Max Setup Count: 0 Reserved: 00 Flags: 0x0000 .... .... .... ..0. = One Way Transaction: Two way transaction .... .... .... ...0 = Disconnect TID: Do NOT disconnect TID Timeout: Return immediately (0) Reserved: 0000 Parameter Count: 34 Parameter Offset: 68 Data Count: 0 Data Offset: 102 Setup Count: 1 Reserved: 00 Subcommand: FIND_FIRST2 (0x0001) Byte Count (BCC): 37 Padding: 004420 FIND_FIRST2 Parameters Search Attributes: 0x0016 .... .... .... ...0 = Read Only: Do NOT include read only files in search results .... .... .... ..1. = Hidden: Include HIDDEN files in search results .... .... .... .1.. = System: Include SYSTEM files in search results .... .... .... 0... = Volume ID: Do NOT include volume IDs in search results .... .... ...1 .... = Directory: Include DIRECTORIES in search results .... .... ..0. .... = Archive: Do NOT include archive files in search results Search Count: 512 Flags: 0x0006 .... .... ...0 .... = Backup Intent: No backup intent .... .... .... 0... = Continue: New search, do NOT continue from previous position .... .... .... .1.. = Resume: Return RESUME keys .... .... .... ..1. = Close on EOS: CLOSE search if END OF SEARCH is reached .... .... .... ...0 = Close: Do NOT close search after this request Level of Interest: Info Standard (1) Storage Type: 0 Search Pattern: Musique\\* No. Time Source Destination Protocol Info 3 0.000444 192.168.0.190 192.168.0.103 TCP netbios-ssn > 1024 [ACK] Seq=0 Ack=110 Win=16384 Len=0 Frame 3 (60 bytes on wire, 60 bytes captured) Arrival Time: Nov 30, 2005 20:54:01.052872000 Time delta from previous packet: 0.000003000 seconds Time since reference or first frame: 0.000444000 seconds Frame Number: 3 Packet Length: 60 bytes Capture Length: 60 bytes Protocols in frame: eth:ip:tcp Ethernet II, Src: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7), Dst: Microsof_64:96:08 (00:0d:3a:64:96:08) Destination: Microsof_64:96:08 (00:0d:3a:64:96:08) Source: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Type: IP (0x0800) Trailer: 450853A38001 Internet Protocol, Src: 192.168.0.190 (192.168.0.190), Dst: 192.168.0.103 (192.168.0.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x85e5 (34277) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: TCP (0x06) Header checksum: 0x9275 [correct] Good: True Bad : False Source: 192.168.0.190 (192.168.0.190) Destination: 192.168.0.103 (192.168.0.103) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: 1024 (1024), Seq: 0, Ack: 110, Len: 0 Source port: netbios-ssn (139) Destination port: 1024 (1024) Sequence number: 0 (relative sequence number) Acknowledgement number: 110 (relative ack number) Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16384 Checksum: 0xb9ef [correct] SEQ/ACK analysis This is an ACK to the segment in frame: 2 The RTT to ACK the segment was: 0.000003000 seconds No. Time Source Destination Protocol Info 4 0.001306 192.168.0.190 192.168.0.103 SMB Trans2 Response, FIND_FIRST2 Frame 4 (123 bytes on wire, 123 bytes captured) Arrival Time: Nov 30, 2005 20:54:01.053734000 Time delta from previous packet: 0.000862000 seconds Time since reference or first frame: 0.001306000 seconds Frame Number: 4 Packet Length: 123 bytes Capture Length: 123 bytes Protocols in frame: eth:ip:tcp:nbss:smb Ethernet II, Src: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7), Dst: Microsof_64:96:08 (00:0d:3a:64:96:08) Destination: Microsof_64:96:08 (00:0d:3a:64:96:08) Source: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Type: IP (0x0800) Internet Protocol, Src: 192.168.0.190 (192.168.0.190), Dst: 192.168.0.103 (192.168.0.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 109 Identification: 0x85e7 (34279) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: TCP (0x06) Header checksum: 0x922e [correct] Good: True Bad : False Source: 192.168.0.190 (192.168.0.190) Destination: 192.168.0.103 (192.168.0.103) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: 1024 (1024), Seq: 0, Ack: 110, Len: 69 Source port: netbios-ssn (139) Destination port: 1024 (1024) Sequence number: 0 (relative sequence number) Next sequence number: 69 (relative sequence number) Acknowledgement number: 110 (relative ack number) Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16384 Checksum: 0xec23 [correct] NetBIOS Session Service Message Type: Session message Flags: 0x00 .... ...0 = Add 0 to length Length: 65 SMB (Server Message Block Protocol) SMB Header Server Component: SMB Response to: 2 Time from request: 0.000865000 seconds SMB Command: Trans2 (0x32) Error Class: Success (0x00) Reserved: 00 Error Code: No Error Flags: 0x88 1... .... = Request/Response: Message is a response to the client/redirector .0.. .... = Notify: Notify client only on open ..0. .... = Oplocks: OpLock not requested/granted ...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized .... 1... = Case Sensitivity: Path names are caseless .... ..0. = Receive Buffer Posted: Receive buffer has not been posted .... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported Flags2: 0x8801 1... .... .... .... = Unicode Strings: Strings are Unicode .0.. .... .... .... = Error Code Type: Error codes are DOS error codes ..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only ...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs .... 1... .... .... = Extended Security Negotiation: Extended security negotiation is supported .... .... .0.. .... = Long Names Used: Path names in request are not long file names .... .... .... .0.. = Security Signatures: Security signatures are not supported .... .... .... ..0. = Extended Attributes: Extended attributes are not supported .... .... .... ...1 = Long Names Allowed: Long file names are allowed in the response Process ID High: 0 Signature: 0000000000000000 Reserved: 0000 Tree ID: 1 Process ID: 1 User ID: 0 Multiplex ID: 64 Trans2 Response (0x32) Subcommand: FIND_FIRST2 (0x0001) Word Count (WCT): 10 Total Parameter Count: 10 Total Data Count: 0 Reserved: 0000 Parameter Count: 10 Parameter Offset: 55 Parameter Displacement: 0 Data Count: 0 Data Offset: 65 Data Displacement: 0 Setup Count: 0 Reserved: 00 Byte Count (BCC): 10 FIND_FIRST2 Parameters Level of Interest: Info Standard (1) Search ID: 0x0000 Search Count: 0 End Of Search: 1 EA Error offset: 0 Last Name Offset: 0 No. Time Source Destination Protocol Info 5 0.001308 192.168.0.103 192.168.0.190 TCP 1024 > netbios-ssn [ACK] Seq=110 Ack=69 Win=63753 Len=0 Frame 5 (60 bytes on wire, 60 bytes captured) Arrival Time: Nov 30, 2005 20:54:01.053736000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.001308000 seconds Frame Number: 5 Packet Length: 60 bytes Capture Length: 60 bytes Protocols in frame: eth:ip:tcp Ethernet II, Src: Microsof_64:96:08 (00:0d:3a:64:96:08), Dst: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Destination: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Source: Microsof_64:96:08 (00:0d:3a:64:96:08) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 192.168.0.103 (192.168.0.103), Dst: 192.168.0.190 (192.168.0.190) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x9fc5 (40901) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x5895 [correct] Good: True Bad : False Source: 192.168.0.103 (192.168.0.103) Destination: 192.168.0.190 (192.168.0.190) Transmission Control Protocol, Src Port: 1024 (1024), Dst Port: netbios-ssn (139), Seq: 110, Ack: 69, Len: 0 Source port: 1024 (1024) Destination port: netbios-ssn (139) Sequence number: 110 (relative sequence number) Acknowledgement number: 69 (relative ack number) Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 63753 Checksum: 0x00a1 [correct] SEQ/ACK analysis This is an ACK to the segment in frame: 4 The RTT to ACK the segment was: 0.000002000 seconds No. Time Source Destination Protocol Info 6 4.390646 192.168.0.190 192.168.0.255 BROWSER Host Announcement LANDISK-90E7, Workstation, Server, Windows for Workgroups, Potential Browser, Windows 95 or above Frame 6 (243 bytes on wire, 243 bytes captured) Arrival Time: Nov 30, 2005 20:54:05.443074000 Time delta from previous packet: 4.389338000 seconds Time since reference or first frame: 4.390646000 seconds Frame Number: 6 Packet Length: 243 bytes Capture Length: 243 bytes Protocols in frame: eth:ip:udp:nbdgm:smb:browser Ethernet II, Src: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Source: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7) Type: IP (0x0800) Internet Protocol, Src: 192.168.0.190 (192.168.0.190), Dst: 192.168.0.255 (192.168.0.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 229 Identification: 0x85e9 (34281) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x9111 [correct] Good: True Bad : False Source: 192.168.0.190 (192.168.0.190) Destination: 192.168.0.255 (192.168.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) Source port: netbios-dgm (138) Destination port: netbios-dgm (138) Length: 209 Checksum: 0x3b43 [correct] NetBIOS Datagram Service Message Type: Direct_group datagram (17) More fragments follow: No This is first fragment: Yes Node Type: NBDD (3) Datagram ID: 0x1111 Source IP: 192.168.0.190 (192.168.0.190) Source Port: 138 Datagram length: 187 bytes Packet offset: 0 bytes Source name: LANDISK-90E7<00> (Workstation/Redirector) Destination name: WORKGROUP<1e> (Browser Election Service) SMB (Server Message Block Protocol) SMB Header Server Component: SMB SMB Command: Trans (0x25) Error Class: Success (0x00) Reserved: 00 Error Code: No Error Flags: 0x00 0... .... = Request/Response: Message is a request to the server .0.. .... = Notify: Notify client only on open ..0. .... = Oplocks: OpLock not requested/granted ...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized .... 0... = Case Sensitivity: Path names are case sensitive .... ..0. = Receive Buffer Posted: Receive buffer has not been posted .... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported Flags2: 0x0000 0... .... .... .... = Unicode Strings: Strings are ASCII .0.. .... .... .... = Error Code Type: Error codes are DOS error codes ..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only ...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs .... 0... .... .... = Extended Security Negotiation: Extended security negotiation is not supported .... .... .0.. .... = Long Names Used: Path names in request are not long file names .... .... .... .0.. = Security Signatures: Security signatures are not supported .... .... .... ..0. = Extended Attributes: Extended attributes are not supported .... .... .... ...0 = Long Names Allowed: Long file names are not allowed in the response Process ID High: 0 Signature: 0000000000000000 Reserved: 0000 Tree ID: 0 Process ID: 0 User ID: 0 Multiplex ID: 0 Trans Request (0x25) Word Count (WCT): 17 Total Parameter Count: 0 Total Data Count: 33 Max Parameter Count: 0 Max Data Count: 0 Max Setup Count: 0 Reserved: 00 Flags: 0x0000 .... .... .... ..0. = One Way Transaction: Two way transaction .... .... .... ...0 = Disconnect TID: Do NOT disconnect TID Timeout: 1 second Reserved: 0000 Parameter Count: 0 Parameter Offset: 0 Data Count: 33 Data Offset: 86 Setup Count: 3 Reserved: 00 Byte Count (BCC): 50 Transaction Name: \MAILSLOT\BROWSE SMB MailSlot Protocol Opcode: Write Mail Slot (1) Priority: 0 Class: Unreliable & Broadcast (2) Size: 50 Mailslot Name: \MAILSLOT\BROWSE Microsoft Windows Browser Protocol Command: Host Announcement (0x01) Update Count: 0 Update Periodicity: 5 minutes Host Name: LANDISK-90E7 OS Major Version: 4 OS Minor Version: 0 Server Type: 0x00412003 .... .... .... .... .... .... .... ...1 = Workstation: This is a Workstation .... .... .... .... .... .... .... ..1. = Server: This is a Server .... .... .... .... .... .... .... .0.. = SQL: This is NOT an SQL server .... .... .... .... .... .... .... 0... = Domain Controller: This is NOT a Domain Controller .... .... .... .... .... .... ...0 .... = Backup Controller: This is NOT a Backup Controller .... .... .... .... .... .... ..0. .... = Time Source: This is NOT a Time Source .... .... .... .... .... .... .0.. .... = Apple: This is NOT an Apple host .... .... .... .... .... .... 0... .... = Novell: This is NOT a Novell server .... .... .... .... .... ...0 .... .... = Member: This is NOT a Domain Member server .... .... .... .... .... ..0. .... .... = Print: This is NOT a Print Queue server .... .... .... .... .... .0.. .... .... = Dialin: This is NOT a Dialin server .... .... .... .... .... 0... .... .... = Xenix: This is NOT a Xenix server .... .... .... .... ...0 .... .... .... = NT Workstation: This is NOT an NT Workstation .... .... .... .... ..1. .... .... .... = WfW: This is a WfW host .... .... .... .... 0... .... .... .... = NT Server: This is NOT an NT Server .... .... .... ...1 .... .... .... .... = Potential Browser: This is a Potential Browser .... .... .... ..0. .... .... .... .... = Backup Browser: This is NOT a Backup Browser .... .... .... .0.. .... .... .... .... = Master Browser: This is NOT a Master Browser .... .... .... 0... .... .... .... .... = Domain Master Browser: This is NOT a Domain Master Browser .... .... ...0 .... .... .... .... .... = OSF: This is NOT an OSF host .... .... ..0. .... .... .... .... .... = VMS: This is NOT a VMS host .... .... .1.. .... .... .... .... .... = Windows 95+: This is a Windows 95 or above host .0.. .... .... .... .... .... .... .... = Local: This is NOT a local list only request 0... .... .... .... .... .... .... .... = Domain Enum: This is NOT a Domain Enum request Browser Protocol Major Version: 15 Browser Protocol Minor Version: 1 Signature: 0xaa55 Host Comment: