rendered paste bodyNo. Time Source Destination Protocol Info
1 0.000000 192.168.0.103 192.168.0.190 NBSS Session keep-alive
Frame 1 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 30, 2005 20:54:01.052428000
Time delta from previous packet: 0.000000000 seconds
Time since reference or first frame: 0.000000000 seconds
Frame Number: 1
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp:nbss
Ethernet II, Src: Microsof_64:96:08 (00:0d:3a:64:96:08), Dst: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Destination: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Source: Microsof_64:96:08 (00:0d:3a:64:96:08)
Type: IP (0x0800)
Trailer: 0000
Internet Protocol, Src: 192.168.0.103 (192.168.0.103), Dst: 192.168.0.190 (192.168.0.190)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x9fc3 (40899)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x5893 [correct]
Good: True
Bad : False
Source: 192.168.0.103 (192.168.0.103)
Destination: 192.168.0.190 (192.168.0.190)
Transmission Control Protocol, Src Port: 1024 (1024), Dst Port: netbios-ssn (139), Seq: 0, Ack: 0, Len: 4
Source port: 1024 (1024)
Destination port: netbios-ssn (139)
Sequence number: 0 (relative sequence number)
Next sequence number: 4 (relative sequence number)
Acknowledgement number: 0 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 63822
Checksum: 0x7c02 [correct]
NetBIOS Session Service
Message Type: Session keep-alive
Flags: 0x00
.... ...0 = Add 0 to length
Length: 0
No. Time Source Destination Protocol Info
2 0.000441 192.168.0.103 192.168.0.190 SMB Trans2 Request, FIND_FIRST2, Pattern: Musique\\*
Frame 2 (160 bytes on wire, 160 bytes captured)
Arrival Time: Nov 30, 2005 20:54:01.052869000
Time delta from previous packet: 0.000441000 seconds
Time since reference or first frame: 0.000441000 seconds
Frame Number: 2
Packet Length: 160 bytes
Capture Length: 160 bytes
Protocols in frame: eth:ip:tcp:nbss:smb
Ethernet II, Src: Microsof_64:96:08 (00:0d:3a:64:96:08), Dst: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Destination: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Source: Microsof_64:96:08 (00:0d:3a:64:96:08)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.0.103 (192.168.0.103), Dst: 192.168.0.190 (192.168.0.190)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 146
Identification: 0x9fc4 (40900)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x582c [correct]
Good: True
Bad : False
Source: 192.168.0.103 (192.168.0.103)
Destination: 192.168.0.190 (192.168.0.190)
Transmission Control Protocol, Src Port: 1024 (1024), Dst Port: netbios-ssn (139), Seq: 4, Ack: 0, Len: 106
Source port: 1024 (1024)
Destination port: netbios-ssn (139)
Sequence number: 4 (relative sequence number)
Next sequence number: 110 (relative sequence number)
Acknowledgement number: 0 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 63822
Checksum: 0xf65e [correct]
NetBIOS Session Service
Message Type: Session message
Flags: 0x00
.... ...0 = Add 0 to length
Length: 102
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
Response in: 4
SMB Command: Trans2 (0x32)
Error Class: Success (0x00)
Reserved: 00
Error Code: No Error
Flags: 0x08
0... .... = Request/Response: Message is a request to the server
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 1... = Case Sensitivity: Path names are caseless
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0x8801
1... .... .... .... = Unicode Strings: Strings are Unicode
.0.. .... .... .... = Error Code Type: Error codes are DOS error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 1... .... .... = Extended Security Negotiation: Extended security negotiation is supported
.... .... .0.. .... = Long Names Used: Path names in request are not long file names
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...1 = Long Names Allowed: Long file names are allowed in the response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 1
Process ID: 1
User ID: 0
Multiplex ID: 64
Trans2 Request (0x32)
Word Count (WCT): 15
Total Parameter Count: 34
Total Data Count: 0
Max Parameter Count: 10
Max Data Count: 2920
Max Setup Count: 0
Reserved: 00
Flags: 0x0000
.... .... .... ..0. = One Way Transaction: Two way transaction
.... .... .... ...0 = Disconnect TID: Do NOT disconnect TID
Timeout: Return immediately (0)
Reserved: 0000
Parameter Count: 34
Parameter Offset: 68
Data Count: 0
Data Offset: 102
Setup Count: 1
Reserved: 00
Subcommand: FIND_FIRST2 (0x0001)
Byte Count (BCC): 37
Padding: 004420
FIND_FIRST2 Parameters
Search Attributes: 0x0016
.... .... .... ...0 = Read Only: Do NOT include read only files in search results
.... .... .... ..1. = Hidden: Include HIDDEN files in search results
.... .... .... .1.. = System: Include SYSTEM files in search results
.... .... .... 0... = Volume ID: Do NOT include volume IDs in search results
.... .... ...1 .... = Directory: Include DIRECTORIES in search results
.... .... ..0. .... = Archive: Do NOT include archive files in search results
Search Count: 512
Flags: 0x0006
.... .... ...0 .... = Backup Intent: No backup intent
.... .... .... 0... = Continue: New search, do NOT continue from previous position
.... .... .... .1.. = Resume: Return RESUME keys
.... .... .... ..1. = Close on EOS: CLOSE search if END OF SEARCH is reached
.... .... .... ...0 = Close: Do NOT close search after this request
Level of Interest: Info Standard (1)
Storage Type: 0
Search Pattern: Musique\\*
No. Time Source Destination Protocol Info
3 0.000444 192.168.0.190 192.168.0.103 TCP netbios-ssn > 1024 [ACK] Seq=0 Ack=110 Win=16384 Len=0
Frame 3 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 30, 2005 20:54:01.052872000
Time delta from previous packet: 0.000003000 seconds
Time since reference or first frame: 0.000444000 seconds
Frame Number: 3
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7), Dst: Microsof_64:96:08 (00:0d:3a:64:96:08)
Destination: Microsof_64:96:08 (00:0d:3a:64:96:08)
Source: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Type: IP (0x0800)
Trailer: 450853A38001
Internet Protocol, Src: 192.168.0.190 (192.168.0.190), Dst: 192.168.0.103 (192.168.0.103)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x85e5 (34277)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 32
Protocol: TCP (0x06)
Header checksum: 0x9275 [correct]
Good: True
Bad : False
Source: 192.168.0.190 (192.168.0.190)
Destination: 192.168.0.103 (192.168.0.103)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: 1024 (1024), Seq: 0, Ack: 110, Len: 0
Source port: netbios-ssn (139)
Destination port: 1024 (1024)
Sequence number: 0 (relative sequence number)
Acknowledgement number: 110 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 16384
Checksum: 0xb9ef [correct]
SEQ/ACK analysis
This is an ACK to the segment in frame: 2
The RTT to ACK the segment was: 0.000003000 seconds
No. Time Source Destination Protocol Info
4 0.001306 192.168.0.190 192.168.0.103 SMB Trans2 Response, FIND_FIRST2
Frame 4 (123 bytes on wire, 123 bytes captured)
Arrival Time: Nov 30, 2005 20:54:01.053734000
Time delta from previous packet: 0.000862000 seconds
Time since reference or first frame: 0.001306000 seconds
Frame Number: 4
Packet Length: 123 bytes
Capture Length: 123 bytes
Protocols in frame: eth:ip:tcp:nbss:smb
Ethernet II, Src: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7), Dst: Microsof_64:96:08 (00:0d:3a:64:96:08)
Destination: Microsof_64:96:08 (00:0d:3a:64:96:08)
Source: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.0.190 (192.168.0.190), Dst: 192.168.0.103 (192.168.0.103)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 109
Identification: 0x85e7 (34279)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 32
Protocol: TCP (0x06)
Header checksum: 0x922e [correct]
Good: True
Bad : False
Source: 192.168.0.190 (192.168.0.190)
Destination: 192.168.0.103 (192.168.0.103)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: 1024 (1024), Seq: 0, Ack: 110, Len: 69
Source port: netbios-ssn (139)
Destination port: 1024 (1024)
Sequence number: 0 (relative sequence number)
Next sequence number: 69 (relative sequence number)
Acknowledgement number: 110 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 16384
Checksum: 0xec23 [correct]
NetBIOS Session Service
Message Type: Session message
Flags: 0x00
.... ...0 = Add 0 to length
Length: 65
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
Response to: 2
Time from request: 0.000865000 seconds
SMB Command: Trans2 (0x32)
Error Class: Success (0x00)
Reserved: 00
Error Code: No Error
Flags: 0x88
1... .... = Request/Response: Message is a response to the client/redirector
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 1... = Case Sensitivity: Path names are caseless
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0x8801
1... .... .... .... = Unicode Strings: Strings are Unicode
.0.. .... .... .... = Error Code Type: Error codes are DOS error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 1... .... .... = Extended Security Negotiation: Extended security negotiation is supported
.... .... .0.. .... = Long Names Used: Path names in request are not long file names
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...1 = Long Names Allowed: Long file names are allowed in the response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 1
Process ID: 1
User ID: 0
Multiplex ID: 64
Trans2 Response (0x32)
Subcommand: FIND_FIRST2 (0x0001)
Word Count (WCT): 10
Total Parameter Count: 10
Total Data Count: 0
Reserved: 0000
Parameter Count: 10
Parameter Offset: 55
Parameter Displacement: 0
Data Count: 0
Data Offset: 65
Data Displacement: 0
Setup Count: 0
Reserved: 00
Byte Count (BCC): 10
FIND_FIRST2 Parameters
Level of Interest: Info Standard (1)
Search ID: 0x0000
Search Count: 0
End Of Search: 1
EA Error offset: 0
Last Name Offset: 0
No. Time Source Destination Protocol Info
5 0.001308 192.168.0.103 192.168.0.190 TCP 1024 > netbios-ssn [ACK] Seq=110 Ack=69 Win=63753 Len=0
Frame 5 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 30, 2005 20:54:01.053736000
Time delta from previous packet: 0.000002000 seconds
Time since reference or first frame: 0.001308000 seconds
Frame Number: 5
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: Microsof_64:96:08 (00:0d:3a:64:96:08), Dst: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Destination: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Source: Microsof_64:96:08 (00:0d:3a:64:96:08)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src: 192.168.0.103 (192.168.0.103), Dst: 192.168.0.190 (192.168.0.190)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x9fc5 (40901)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x5895 [correct]
Good: True
Bad : False
Source: 192.168.0.103 (192.168.0.103)
Destination: 192.168.0.190 (192.168.0.190)
Transmission Control Protocol, Src Port: 1024 (1024), Dst Port: netbios-ssn (139), Seq: 110, Ack: 69, Len: 0
Source port: 1024 (1024)
Destination port: netbios-ssn (139)
Sequence number: 110 (relative sequence number)
Acknowledgement number: 69 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 63753
Checksum: 0x00a1 [correct]
SEQ/ACK analysis
This is an ACK to the segment in frame: 4
The RTT to ACK the segment was: 0.000002000 seconds
No. Time Source Destination Protocol Info
6 4.390646 192.168.0.190 192.168.0.255 BROWSER Host Announcement LANDISK-90E7, Workstation, Server, Windows for Workgroups, Potential Browser, Windows 95 or above
Frame 6 (243 bytes on wire, 243 bytes captured)
Arrival Time: Nov 30, 2005 20:54:05.443074000
Time delta from previous packet: 4.389338000 seconds
Time since reference or first frame: 4.390646000 seconds
Frame Number: 6
Packet Length: 243 bytes
Capture Length: 243 bytes
Protocols in frame: eth:ip:udp:nbdgm:smb:browser
Ethernet II, Src: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Source: Asiamajo_c8:90:e7 (00:13:14:c8:90:e7)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.0.190 (192.168.0.190), Dst: 192.168.0.255 (192.168.0.255)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 229
Identification: 0x85e9 (34281)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 32
Protocol: UDP (0x11)
Header checksum: 0x9111 [correct]
Good: True
Bad : False
Source: 192.168.0.190 (192.168.0.190)
Destination: 192.168.0.255 (192.168.0.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
Source port: netbios-dgm (138)
Destination port: netbios-dgm (138)
Length: 209
Checksum: 0x3b43 [correct]
NetBIOS Datagram Service
Message Type: Direct_group datagram (17)
More fragments follow: No
This is first fragment: Yes
Node Type: NBDD (3)
Datagram ID: 0x1111
Source IP: 192.168.0.190 (192.168.0.190)
Source Port: 138
Datagram length: 187 bytes
Packet offset: 0 bytes
Source name: LANDISK-90E7<00> (Workstation/Redirector)
Destination name: WORKGROUP<1e> (Browser Election Service)
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
SMB Command: Trans (0x25)
Error Class: Success (0x00)
Reserved: 00
Error Code: No Error
Flags: 0x00
0... .... = Request/Response: Message is a request to the server
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 0... = Case Sensitivity: Path names are case sensitive
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0x0000
0... .... .... .... = Unicode Strings: Strings are ASCII
.0.. .... .... .... = Error Code Type: Error codes are DOS error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 0... .... .... = Extended Security Negotiation: Extended security negotiation is not supported
.... .... .0.. .... = Long Names Used: Path names in request are not long file names
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...0 = Long Names Allowed: Long file names are not allowed in the response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 0
Process ID: 0
User ID: 0
Multiplex ID: 0
Trans Request (0x25)
Word Count (WCT): 17
Total Parameter Count: 0
Total Data Count: 33
Max Parameter Count: 0
Max Data Count: 0
Max Setup Count: 0
Reserved: 00
Flags: 0x0000
.... .... .... ..0. = One Way Transaction: Two way transaction
.... .... .... ...0 = Disconnect TID: Do NOT disconnect TID
Timeout: 1 second
Reserved: 0000
Parameter Count: 0
Parameter Offset: 0
Data Count: 33
Data Offset: 86
Setup Count: 3
Reserved: 00
Byte Count (BCC): 50
Transaction Name: \MAILSLOT\BROWSE
SMB MailSlot Protocol
Opcode: Write Mail Slot (1)
Priority: 0
Class: Unreliable & Broadcast (2)
Size: 50
Mailslot Name: \MAILSLOT\BROWSE
Microsoft Windows Browser Protocol
Command: Host Announcement (0x01)
Update Count: 0
Update Periodicity: 5 minutes
Host Name: LANDISK-90E7
OS Major Version: 4
OS Minor Version: 0
Server Type: 0x00412003
.... .... .... .... .... .... .... ...1 = Workstation: This is a Workstation
.... .... .... .... .... .... .... ..1. = Server: This is a Server
.... .... .... .... .... .... .... .0.. = SQL: This is NOT an SQL server
.... .... .... .... .... .... .... 0... = Domain Controller: This is NOT a Domain Controller
.... .... .... .... .... .... ...0 .... = Backup Controller: This is NOT a Backup Controller
.... .... .... .... .... .... ..0. .... = Time Source: This is NOT a Time Source
.... .... .... .... .... .... .0.. .... = Apple: This is NOT an Apple host
.... .... .... .... .... .... 0... .... = Novell: This is NOT a Novell server
.... .... .... .... .... ...0 .... .... = Member: This is NOT a Domain Member server
.... .... .... .... .... ..0. .... .... = Print: This is NOT a Print Queue server
.... .... .... .... .... .0.. .... .... = Dialin: This is NOT a Dialin server
.... .... .... .... .... 0... .... .... = Xenix: This is NOT a Xenix server
.... .... .... .... ...0 .... .... .... = NT Workstation: This is NOT an NT Workstation
.... .... .... .... ..1. .... .... .... = WfW: This is a WfW host
.... .... .... .... 0... .... .... .... = NT Server: This is NOT an NT Server
.... .... .... ...1 .... .... .... .... = Potential Browser: This is a Potential Browser
.... .... .... ..0. .... .... .... .... = Backup Browser: This is NOT a Backup Browser
.... .... .... .0.. .... .... .... .... = Master Browser: This is NOT a Master Browser
.... .... .... 0... .... .... .... .... = Domain Master Browser: This is NOT a Domain Master Browser
.... .... ...0 .... .... .... .... .... = OSF: This is NOT an OSF host
.... .... ..0. .... .... .... .... .... = VMS: This is NOT a VMS host
.... .... .1.. .... .... .... .... .... = Windows 95+: This is a Windows 95 or above host
.0.. .... .... .... .... .... .... .... = Local: This is NOT a local list only request
0... .... .... .... .... .... .... .... = Domain Enum: This is NOT a Domain Enum request
Browser Protocol Major Version: 15
Browser Protocol Minor Version: 1
Signature: 0xaa55
Host Comment: