Ethereal-users: [Ethereal-users] Windows XP Fresh Install Wont Connect to www.microsoft.com or w
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Donovan J. Edye" <donovan@xxxxxxxxxxx>
Date: Wed, 15 Dec 2004 09:12:27 +1100
G'Day,
- Apologies for long post, but I believe it all to be relevant:
I have a:
- Via EPIA-M C3 1.0A with BIOS 1.16
- I install Windows XP (incl SP1a) [Tried two different media sets] (And
whether I add SP2 on top of that makes no difference)
I run up IE / Mozilla (Copied from another box) and attempt to connect to
www.intel.com. No problems and the web site comes up. However if I attempt
to connect to www.mozilla.org or www.microsoft.com then nothing happens and
IE returns "Cannot Load Page" and Mozilla returns "Document Contains No
Data". I have scanned the machine for viruses, checked the hosts file and
checked that I don't have spyware. For the life of me I cannot work out why
this wont connect. Can anyone shed any light or make some suggestions?
TIA
Doing telnet connections as follows: (See below for Ethereal output)
Intel
HTTP/1.1 200 OK
Date: Tue, 14 Dec 2004 06:35:34 GMT
Server: Microsoft-IIS/6.0
P3P: CP="CAO DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR STP ONL UNI COM NAV
INT D EM STA PRE"
X-Powered-By: ASP.NET
Set-Cookie: AnonymousGuest=C67AAB2C3B51448883CA4BEF3952BD58308; expires=Fri
28-M ay-2010 23:59:00 GMT; path=/;
Content-Length: 28005
Content-Type: text/html
MS
HTTP/1.1 200 OK
Date: Tue, 14 Dec 2004 06:37:21 GMT
Server: Microsoft-IIS/6.0
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR
SAMo C NT COM INT NAV ONL PHY PRE PUR UNI"
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Cache-Control: public, max-age=4375
Expires: Tue, 14 Dec 2004 07:50:16 GMT
Last-Modified: Tue, 14 Dec 2004 05:03:36 GMT
Content-Type: text/html
Content-Length: 13086
Mozilla
HTTP/1.1 200 OK
Date: Tue, 14 Dec 2004 06:42:44 GMT
Server: Apache/2.0.46 (Red Hat)
Last-Modified: Tue, 14 Dec 2004 06:32:22 GMT
ETag: "9d402b-921f-955ba980"
Accept-Ranges: bytes
Content-Length: 37407
Content-Type: text/html
Connection to host lost.
Ethereal reveals the following when connecting to www.microsoft.com
No. Time Source Destination Protocol
Info
1 0.000000 hometheatre.home.local music.home.local DNS
Standard query A www.microsoft.com
Frame 1 (77 bytes on wire, 77 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:40:63:d8:57:29
Internet Protocol, Src Addr: hometheatre.home.local (192.168.40.100), Dst
Addr: music.home.local (192.168.40.3)
User Datagram Protocol, Src Port: 1111 (1111), Dst Port: domain (53)
Domain Name System (query)
0000 00 40 63 d8 57 29 00 40 63 ca 84 72 08 00 45 00 [email protected])[email protected].
0010 00 3f 9a 52 00 00 80 11 ce a3 c0 a8 28 64 c0 a8 .?.R........(d..
0020 28 03 04 57 00 35 00 2b ca 1b af 54 01 00 00 01 (..W.5.+...T....
0030 00 00 00 00 00 00 03 77 77 77 09 6d 69 63 72 6f .......www.micro
0040 73 6f 66 74 03 63 6f 6d 00 00 01 00 01 soft.com.....
No. Time Source Destination Protocol
Info
2 0.090367 music.home.local hometheatre.home.local DNS
Standard query response CNAME www.microsoft.com.nsatc.net A 207.46.144.222 A
207.46.156.156 A 207.46.244.188 A 207.46.245.92 A 207.46.245.156 A
207.46.249.252 A 207.46.250.252 A 207.46.144.188
Frame 2 (383 bytes on wire, 383 bytes captured)
Ethernet II, Src: 00:40:63:d8:57:29, Dst: 00:40:63:ca:84:72
Internet Protocol, Src Addr: music.home.local (192.168.40.3), Dst Addr:
hometheatre.home.local (192.168.40.100)
User Datagram Protocol, Src Port: domain (53), Dst Port: 1111 (1111)
Domain Name System (response)
0000 00 40 63 ca 84 72 00 40 63 d8 57 29 08 00 45 00 [email protected][email protected])..E.
0010 01 71 4b 6c 40 00 40 11 1c 58 c0 a8 28 03 c0 a8 .qKl@[email protected]..(...
0020 28 64 00 35 04 57 01 5d 9c 24 af 54 81 80 00 01 (d.5.W.].$.T....
0030 00 09 00 04 00 04 03 77 77 77 09 6d 69 63 72 6f .......www.micro
0040 73 6f 66 74 03 63 6f 6d 00 00 01 00 01 c0 0c 00 soft.com........
0050 05 00 01 00 00 0a ef 00 1d 03 77 77 77 09 6d 69 ..........www.mi
0060 63 72 6f 73 6f 66 74 03 63 6f 6d 05 6e 73 61 74 crosoft.com.nsat
0070 63 03 6e 65 74 00 c0 2f 00 01 00 01 00 00 01 0b c.net../........
0080 00 04 cf 2e 90 de c0 2f 00 01 00 01 00 00 01 0b ......./........
0090 00 04 cf 2e 9c 9c c0 2f 00 01 00 01 00 00 01 0b ......./........
00a0 00 04 cf 2e f4 bc c0 2f 00 01 00 01 00 00 01 0b ......./........
00b0 00 04 cf 2e f5 5c c0 2f 00 01 00 01 00 00 01 0b .....\./........
00c0 00 04 cf 2e f5 9c c0 2f 00 01 00 01 00 00 01 0b ......./........
00d0 00 04 cf 2e f9 fc c0 2f 00 01 00 01 00 00 01 0b ......./........
00e0 00 04 cf 2e fa fc c0 2f 00 01 00 01 00 00 01 0b ......./........
00f0 00 04 cf 2e 90 bc c0 41 00 02 00 01 00 02 63 69 .......A......ci
0100 00 07 01 6b 02 6e 73 c0 41 c0 41 00 02 00 01 00 ...k.ns.A.A.....
0110 02 63 69 00 04 01 6c c0 da c0 41 00 02 00 01 00 .ci...l...A.....
0120 02 63 69 00 0a 07 75 73 2d 63 61 2d 36 c0 da c0 .ci...us-ca-6...
0130 41 00 02 00 01 00 02 63 69 00 04 01 6a c0 da c1 A......ci...j...
0140 11 00 01 00 01 00 01 5d de 00 04 d2 b8 6c 83 c0 .......].....l..
0150 d8 00 01 00 01 00 01 5d df 00 04 d2 9e db 33 c0 .......]......3.
0160 eb 00 01 00 01 00 00 9f 2c 00 04 d8 ce b3 06 c0 ........,.......
0170 fb 00 01 00 01 00 02 63 69 00 04 3f d1 46 e7 .......ci..?.F.
No. Time Source Destination Protocol
Info
3 0.091933 hometheatre.home.local www.microsoft.com.nsatc.net TCP
1154 > http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
Frame 3 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:40:63:d8:57:29
Internet Protocol, Src Addr: hometheatre.home.local (192.168.40.100), Dst
Addr: www.microsoft.com.nsatc.net (207.46.144.222)
Transmission Control Protocol, Src Port: 1154 (1154), Dst Port: http (80),
Seq: 0, Ack: 0, Len: 0
0000 00 40 63 d8 57 29 00 40 63 ca 84 72 08 00 45 00 [email protected])[email protected].
0010 00 30 9a 53 40 00 80 06 17 5b c0 a8 28 64 cf 2e .0.S@....[..(d..
0020 90 de 04 82 00 50 37 f1 bc ee 00 00 00 00 70 02 .....P7.......p.
0030 ff ff 40 54 00 00 02 04 05 b4 01 01 04 02 ..@T..........
No. Time Source Destination Protocol
Info
4 0.092111 music.home.local hometheatre.home.local ICMP
Redirect
Frame 4 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: 00:40:63:d8:57:29, Dst: 00:40:63:ca:84:72
Internet Protocol, Src Addr: music.home.local (192.168.40.3), Dst Addr:
hometheatre.home.local (192.168.40.100)
Internet Control Message Protocol
0000 00 40 63 ca 84 72 00 40 63 d8 57 29 08 00 45 c0 [email protected][email protected])..E.
0010 00 4c 10 63 00 00 40 01 97 d6 c0 a8 28 03 c0 a8 .L.c..@.....(...
0020 28 64 05 01 5b 91 c0 a8 28 01 45 00 00 30 9a 53 (d..[...(.E..0.S
0030 40 00 7f 06 18 5b c0 a8 28 64 cf 2e 90 de 04 82 @....[..(d......
0040 00 50 37 f1 bc ee 00 00 00 00 70 02 ff ff 40 54 .P7.......p...@T
0050 00 00 02 04 05 b4 01 01 04 02 ..........
No. Time Source Destination Protocol
Info
5 0.302779 www.microsoft.com.nsatc.net hometheatre.home.local TCP
http > 1154 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460
Frame 5 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: 00:50:ba:9a:7a:d7, Dst: 00:40:63:ca:84:72
Internet Protocol, Src Addr: www.microsoft.com.nsatc.net (207.46.144.222),
Dst Addr: hometheatre.home.local (192.168.40.100)
Transmission Control Protocol, Src Port: http (80), Dst Port: 1154 (1154),
Seq: 0, Ack: 1, Len: 0
0000 00 40 63 ca 84 72 00 50 ba 9a 7a d7 08 00 45 10 [email protected].
0010 00 30 4f 19 00 00 70 06 b2 85 cf 2e 90 de c0 a8 .0O...p.........
0020 28 64 00 50 04 82 54 f8 b8 6e 37 f1 bc ef 70 12 (d.P..T..n7...p.
0030 40 00 f2 db 00 00 02 04 05 b4 01 01 04 02 @.............
No. Time Source Destination Protocol
Info
6 0.302895 hometheatre.home.local www.microsoft.com.nsatc.net TCP
1154 > http [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 6 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:40:63:d8:57:29
Internet Protocol, Src Addr: hometheatre.home.local (192.168.40.100), Dst
Addr: www.microsoft.com.nsatc.net (207.46.144.222)
Transmission Control Protocol, Src Port: 1154 (1154), Dst Port: http (80),
Seq: 1, Ack: 1, Len: 0
0000 00 40 63 d8 57 29 00 40 63 ca 84 72 08 00 45 00 [email protected])[email protected].
0010 00 28 9a 55 40 00 80 06 17 61 c0 a8 28 64 cf 2e .([email protected]..(d..
0020 90 de 04 82 00 50 37 f1 bc ef 54 f8 b8 6f 50 10 .....P7...T..oP.
0030 ff ff 5f a0 00 00 .._...
No. Time Source Destination Protocol
Info
7 0.303021 music.home.local hometheatre.home.local ICMP
Redirect
Frame 7 (82 bytes on wire, 82 bytes captured)
Ethernet II, Src: 00:40:63:d8:57:29, Dst: 00:40:63:ca:84:72
Internet Protocol, Src Addr: music.home.local (192.168.40.3), Dst Addr:
hometheatre.home.local (192.168.40.100)
Internet Control Message Protocol
0000 00 40 63 ca 84 72 00 40 63 d8 57 29 08 00 45 c0 [email protected][email protected])..E.
0010 00 44 10 64 00 00 40 01 97 dd c0 a8 28 03 c0 a8 .D.d..@.....(...
0020 28 64 05 01 5b 89 c0 a8 28 01 45 00 00 28 9a 55 (d..[...(.E..(.U
0030 40 00 7f 06 18 61 c0 a8 28 64 cf 2e 90 de 04 82 @....a..(d......
0040 00 50 37 f1 bc ef 54 f8 b8 6f 50 10 ff ff 5f a0 .P7...T..oP..._.
0050 00 00 ..
No. Time Source Destination Protocol
Info
8 0.303383 hometheatre.home.local www.microsoft.com.nsatc.net HTTP
GET / HTTP/1.1
Frame 8 (343 bytes on wire, 343 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:40:63:d8:57:29
Internet Protocol, Src Addr: hometheatre.home.local (192.168.40.100), Dst
Addr: www.microsoft.com.nsatc.net (207.46.144.222)
Transmission Control Protocol, Src Port: 1154 (1154), Dst Port: http (80),
Seq: 1, Ack: 1, Len: 289
Hypertext Transfer Protocol
0000 00 40 63 d8 57 29 00 40 63 ca 84 72 08 00 45 00 [email protected])[email protected].
0010 01 49 9a 56 40 00 80 06 16 3f c0 a8 28 64 cf 2e .I.V@....?..(d..
0020 90 de 04 82 00 50 37 f1 bc ef 54 f8 b8 6f 50 18 .....P7...T..oP.
0030 ff ff d7 3d 00 00 47 45 54 20 2f 20 48 54 54 50 ...=..GET / HTTP
0040 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 69 6d /1.1..Accept: im
0050 61 67 65 2f 67 69 66 2c 20 69 6d 61 67 65 2f 78 age/gif, image/x
0060 2d 78 62 69 74 6d 61 70 2c 20 69 6d 61 67 65 2f -xbitmap, image/
0070 6a 70 65 67 2c 20 69 6d 61 67 65 2f 70 6a 70 65 jpeg, image/pjpe
0080 67 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 g, application/x
0090 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 -shockwave-flash
00a0 2c 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 , */*..Accept-La
00b0 6e 67 75 61 67 65 3a 20 65 6e 2d 61 75 0d 0a 41 nguage: en-au..A
00c0 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 ccept-Encoding:
00d0 67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 gzip, deflate..U
00e0 73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c ser-Agent: Mozil
00f0 6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 la/4.0 (compatib
0100 6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69 le; MSIE 6.0; Wi
0110 6e 64 6f 77 73 20 4e 54 20 35 2e 31 3b 20 53 56 ndows NT 5.1; SV
0120 31 29 0d 0a 48 6f 73 74 3a 20 77 77 77 2e 6d 69 1)..Host: www.mi
0130 63 72 6f 73 6f 66 74 2e 63 6f 6d 0d 0a 43 6f 6e crosoft.com..Con
0140 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c nection: Keep-Al
0150 69 76 65 0d 0a 0d 0a ive....
No. Time Source Destination Protocol
Info
9 3.218214 hometheatre.home.local www.microsoft.com.nsatc.net HTTP
GET / HTTP/1.1
Frame 9 (343 bytes on wire, 343 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:40:63:d8:57:29
Internet Protocol, Src Addr: hometheatre.home.local (192.168.40.100), Dst
Addr: www.microsoft.com.nsatc.net (207.46.144.222)
Transmission Control Protocol, Src Port: 1154 (1154), Dst Port: http (80),
Seq: 1, Ack: 1, Len: 289
Hypertext Transfer Protocol
0000 00 40 63 d8 57 29 00 40 63 ca 84 72 08 00 45 00 [email protected])[email protected].
0010 01 49 9a 58 40 00 80 06 16 3d c0 a8 28 64 cf 2e .I.X@....=..(d..
0020 90 de 04 82 00 50 37 f1 bc ef 54 f8 b8 6f 50 18 .....P7...T..oP.
0030 ff ff d7 3d 00 00 47 45 54 20 2f 20 48 54 54 50 ...=..GET / HTTP
0040 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 69 6d /1.1..Accept: im
0050 61 67 65 2f 67 69 66 2c 20 69 6d 61 67 65 2f 78 age/gif, image/x
0060 2d 78 62 69 74 6d 61 70 2c 20 69 6d 61 67 65 2f -xbitmap, image/
0070 6a 70 65 67 2c 20 69 6d 61 67 65 2f 70 6a 70 65 jpeg, image/pjpe
0080 67 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 g, application/x
0090 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 -shockwave-flash
00a0 2c 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 , */*..Accept-La
00b0 6e 67 75 61 67 65 3a 20 65 6e 2d 61 75 0d 0a 41 nguage: en-au..A
00c0 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 ccept-Encoding:
00d0 67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 gzip, deflate..U
00e0 73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c ser-Agent: Mozil
00f0 6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 la/4.0 (compatib
0100 6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69 le; MSIE 6.0; Wi
0110 6e 64 6f 77 73 20 4e 54 20 35 2e 31 3b 20 53 56 ndows NT 5.1; SV
0120 31 29 0d 0a 48 6f 73 74 3a 20 77 77 77 2e 6d 69 1)..Host: www.mi
0130 63 72 6f 73 6f 66 74 2e 63 6f 6d 0d 0a 43 6f 6e crosoft.com..Con
0140 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c nection: Keep-Al
0150 69 76 65 0d 0a 0d 0a ive....
No. Time Source Destination Protocol
Info
10 3.218498 music.home.local hometheatre.home.local ICMP
Redirect
Frame 10 (371 bytes on wire, 371 bytes captured)
Ethernet II, Src: 00:40:63:d8:57:29, Dst: 00:40:63:ca:84:72
Internet Protocol, Src Addr: music.home.local (192.168.40.3), Dst Addr:
hometheatre.home.local (192.168.40.100)
Internet Control Message Protocol
0000 00 40 63 ca 84 72 00 40 63 d8 57 29 08 00 45 c0 [email protected][email protected])..E.
0010 01 65 10 65 00 00 40 01 96 bb c0 a8 28 03 c0 a8 .e.e..@.....(...
0020 28 64 05 01 5c aa c0 a8 28 01 45 00 01 49 9a 58 (d..\...(.E..I.X
0030 40 00 7f 06 17 3d c0 a8 28 64 cf 2e 90 de 04 82 @....=..(d......
0040 00 50 37 f1 bc ef 54 f8 b8 6f 50 18 ff ff d7 3d .P7...T..oP....=
0050 00 00 47 45 54 20 2f 20 48 54 54 50 2f 31 2e 31 ..GET / HTTP/1.1
0060 0d 0a 41 63 63 65 70 74 3a 20 69 6d 61 67 65 2f ..Accept: image/
0070 67 69 66 2c 20 69 6d 61 67 65 2f 78 2d 78 62 69 gif, image/x-xbi
0080 74 6d 61 70 2c 20 69 6d 61 67 65 2f 6a 70 65 67 tmap, image/jpeg
0090 2c 20 69 6d 61 67 65 2f 70 6a 70 65 67 2c 20 61 , image/pjpeg, a
00a0 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f pplication/x-sho
00b0 63 6b 77 61 76 65 2d 66 6c 61 73 68 2c 20 2a 2f ckwave-flash, */
00c0 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 *..Accept-Langua
00d0 67 65 3a 20 65 6e 2d 61 75 0d 0a 41 63 63 65 70 ge: en-au..Accep
00e0 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 t-Encoding: gzip
00f0 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d , deflate..User-
0100 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34 Agent: Mozilla/4
0110 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20 .0 (compatible;
0120 4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77 MSIE 6.0; Window
0130 73 20 4e 54 20 35 2e 31 3b 20 53 56 31 29 0d 0a s NT 5.1; SV1)..
0140 48 6f 73 74 3a 20 77 77 77 2e 6d 69 63 72 6f 73 Host: www.micros
0150 6f 66 74 2e 63 6f 6d 0d 0a 43 6f 6e 6e 65 63 74 oft.com..Connect
0160 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d ion: Keep-Alive.
0170 0a 0d 0a ...
No. Time Source Destination Protocol
Info
11 3.464647 www.microsoft.com.nsatc.net hometheatre.home.local TCP
[TCP Previous segment lost] http > 1154 [ACK] Seq=2921 Ack=290 Win=65246
Len=0
Frame 11 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:50:ba:9a:7a:d7, Dst: 00:40:63:ca:84:72
Internet Protocol, Src Addr: www.microsoft.com.nsatc.net (207.46.144.222),
Dst Addr: hometheatre.home.local (192.168.40.100)
Transmission Control Protocol, Src Port: http (80), Dst Port: 1154 (1154),
Seq: 2921, Ack: 290, Len: 0
0000 00 40 63 ca 84 72 00 50 ba 9a 7a d7 08 00 45 10 [email protected].
0010 00 28 58 cb 40 00 70 06 68 db cf 2e 90 de c0 a8 .([email protected].......
0020 28 64 00 50 04 82 54 f8 c3 d7 37 f1 be 10 50 10 (d.P..T...7...P.
0030 fe de 54 38 00 00 00 00 00 00 00 00 ..T8........
No. Time Source Destination Protocol
Info
12 4.361838 donovan.home.local 239.255.255.250 SSDP
M-SEARCH * HTTP/1.1
Frame 12 (143 bytes on wire, 143 bytes captured)
Ethernet II, Src: 00:80:c8:0c:26:90, Dst: 01:00:5e:7f:ff:fa
Internet Protocol, Src Addr: donovan.home.local (192.168.40.50), Dst Addr:
239.255.255.250 (239.255.255.250)
User Datagram Protocol, Src Port: 8008 (8008), Dst Port: 1900 (1900)
Hypertext Transfer Protocol
0000 01 00 5e 7f ff fa 00 80 c8 0c 26 90 08 00 45 00 ..^.......&...E.
0010 00 81 48 a4 00 00 04 11 94 f3 c0 a8 28 32 ef ff ..H.........(2..
0020 ff fa 1f 48 07 6c 00 6d 0e 7b 4d 2d 53 45 41 52 ...H.l.m.{M-SEAR
0030 43 48 20 2a 20 48 54 54 50 2f 31 2e 31 0d 0a 53 CH * HTTP/1.1..S
0040 54 3a 20 75 70 6e 70 3a 72 6f 6f 74 64 65 76 69 T: upnp:rootdevi
0050 63 65 0d 0a 4d 58 3a 20 33 0d 0a 4d 41 4e 3a 20 ce..MX: 3..MAN:
0060 22 73 73 64 70 3a 64 69 73 63 6f 76 65 72 22 0d "ssdp:discover".
0070 0a 48 4f 53 54 3a 20 32 33 39 2e 32 35 35 2e 32 .HOST: 239.255.2
0080 35 35 2e 32 35 30 3a 31 39 30 30 0d 0a 0d 0a 55.250:1900....
No. Time Source Destination Protocol
Info
13 5.088818 music.home.local hometheatre.home.local ARP
Who has 192.168.40.100? Tell 192.168.40.3
Frame 13 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:40:63:d8:57:29, Dst: 00:40:63:ca:84:72
Address Resolution Protocol (request)
0000 00 40 63 ca 84 72 00 40 63 d8 57 29 08 06 00 01 [email protected][email protected])....
0010 08 00 06 04 00 01 00 40 63 d8 57 29 c0 a8 28 03 [email protected])..(.
0020 00 00 00 00 00 00 c0 a8 28 64 00 00 00 00 00 00 ........(d......
0030 00 00 00 00 00 00 00 00 00 00 00 00 ............
No. Time Source Destination Protocol
Info
14 5.088859 hometheatre.home.local music.home.local ARP
192.168.40.100 is at 00:40:63:ca:84:72
Frame 14 (42 bytes on wire, 42 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:40:63:d8:57:29
Address Resolution Protocol (reply)
0000 00 40 63 d8 57 29 00 40 63 ca 84 72 08 06 00 01 [email protected])[email protected]....
0010 08 00 06 04 00 02 00 40 63 ca 84 72 c0 a8 28 64 [email protected]..(d
0020 00 40 63 d8 57 29 c0 a8 28 03 [email protected])..(.
No. Time Source Destination Protocol
Info
15 22.325627 hometheatre.home.local donovan.home.local SMB
Echo Request
Frame 15 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:80:c8:0c:26:90
Internet Protocol, Src Addr: hometheatre.home.local (192.168.40.100), Dst
Addr: donovan.home.local (192.168.40.50)
Transmission Control Protocol, Src Port: kpop (1109), Dst Port: netbios-ssn
(139), Seq: 0, Ack: 0, Len: 53
NetBIOS Session Service
SMB (Server Message Block Protocol)
0000 00 80 c8 0c 26 90 00 40 63 ca 84 72 08 00 45 00 ....&[email protected].
0010 00 5d 9a 59 40 00 80 06 8e 5a c0 a8 28 64 c0 a8 .][email protected]..(d..
0020 28 32 04 55 00 8b e9 3b 24 37 d1 b3 c0 b4 50 18 (2.U...;$7....P.
0030 fc 34 5f 3e 00 00 00 00 00 31 ff 53 4d 42 2b 00 .4_>.....1.SMB+.
0040 00 00 00 18 43 c0 00 00 00 00 00 00 00 00 00 00 ....C...........
0050 00 00 ff ff ff fe 00 00 fe ff 01 01 00 0c 00 4a ...............J
0060 6c 4a 6d 49 68 43 6c 42 73 72 00 lJmIhClBsr.
No. Time Source Destination Protocol
Info
16 22.327698 donovan.home.local hometheatre.home.local SMB
Echo Response
Frame 16 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: 00:80:c8:0c:26:90, Dst: 00:40:63:ca:84:72
Internet Protocol, Src Addr: donovan.home.local (192.168.40.50), Dst Addr:
hometheatre.home.local (192.168.40.100)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: kpop
(1109), Seq: 0, Ack: 53, Len: 53
NetBIOS Session Service
SMB (Server Message Block Protocol)
0000 00 40 63 ca 84 72 00 80 c8 0c 26 90 08 00 45 00 [email protected]....&...E.
0010 00 5d 48 aa 40 00 80 06 e0 09 c0 a8 28 32 c0 a8 .]H.@.......(2..
0020 28 64 00 8b 04 55 d1 b3 c0 b4 e9 3b 24 6c 50 18 (d...U.....;$lP.
0030 5d b6 fd 07 00 00 00 00 00 31 ff 53 4d 42 2b 00 ]........1.SMB+.
0040 00 00 00 98 43 c0 00 00 00 00 00 00 00 00 00 00 ....C...........
0050 00 00 ff ff ff fe 00 00 fe ff 01 01 00 0c 00 4a ...............J
0060 6c 4a 6d 49 68 43 6c 42 73 72 00 lJmIhClBsr.
No. Time Source Destination Protocol
Info
17 22.445378 hometheatre.home.local donovan.home.local TCP
kpop > netbios-ssn [ACK] Seq=53 Ack=53 Win=64511 Len=0
Frame 17 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:40:63:ca:84:72, Dst: 00:80:c8:0c:26:90
Internet Protocol, Src Addr: hometheatre.home.local (192.168.40.100), Dst
Addr: donovan.home.local (192.168.40.50)
Transmission Control Protocol, Src Port: kpop (1109), Dst Port: netbios-ssn
(139), Seq: 53, Ack: 53, Len: 0
0000 00 80 c8 0c 26 90 00 40 63 ca 84 72 08 00 45 00 ....&[email protected].
0010 00 28 9a 5a 40 00 80 06 8e 8e c0 a8 28 64 c0 a8 .(.Z@.......(d..
0020 28 32 04 55 00 8b e9 3b 24 6c d1 b3 c0 e9 50 10 (2.U...;$l....P.
0030 fb ff 3c c8 00 00 ..<...
--Donovan
www.edyeweb.com
- Prev by Date: Re: [Ethereal-users] Again about filters
- Next by Date: [Ethereal-users] Ethereal an winpcap on dialup modem and windows98
- Previous by thread: [Ethereal-users] problems with H.323 packets
- Next by thread: [Ethereal-users] Ethereal an winpcap on dialup modem and windows98
- Index(es):