1 1 2016-11-30 15:35:08.640523 IP (tos 0x0, ttl 128, id 376, offset 0, flags [DF], proto TCP (6), length 128)
2 192.168.56.55.445 > 192.168.56.119.49199: Flags [P.], cksum 0x3e2f (incorrect -> 0x3d49), seq 4267808374:4267808462, ack 628292694, win 63102, length 88
3 SMB PACKET: SMBtrans2 (REPLY)
10 Proc ID = 2848 (0xb20)
14 TRANSACT2_OPEN param_length=2 data_length=24
29 [000] 00 00 0B 00 00 00 00 00 00 00 00 00 00 00 00 00 ^@^@^K^@^@^@^@^@ ^@^@^@^@^@^@^@^@
30 [010] 01 00 00 00 00 00 00 00 ^A^@^@^@^@^@^@^@
32 2 2016-11-30 15:35:08.640906 IP (tos 0x0, ttl 128, id 632, offset 0, flags [DF], proto TCP (6), length 114)
33 192.168.56.119.49199 > 192.168.56.55.445: Flags [P.], cksum 0x2437 (correct), seq 1:75, ack 88, win 254, length 74
34 SMB PACKET: SMBtrans2 (REQUEST)
40 Tree ID = 2048 (0x800)
41 Proc ID = 2848 (0xb20)
45 TRANSACT2_QFSINFO param_length=2 data_length=0
62 3 2016-11-30 15:35:08.641033 IP (tos 0x0, ttl 128, id 377, offset 0, flags [DF], proto TCP (6), length 120)
63 192.168.56.55.445 > 192.168.56.119.49199: Flags [P.], cksum 0xf1fb (incorrect -> 0x1559), seq 88:168, ack 75, win 63028, length 80
64 SMB PACKET: SMBtrans2 (REPLY)
75 TRANSACT2_QFSINFO param_length=0 data_length=20
92 [000] FF 00 07 00 FF 00 00 00 08 00 00 FF FF FF FF 00 M-^?^@^G^@M-^?^@^@^@ ^H^@^@M-^?M-^?M-^?M-^?^@
93 [010] 46 00 53 00 F^@S^@
95 4 2038-01-01 00:00:00.000000 IP (tos 0x0, ttl 128, id 633, offset 0, flags [DF], proto TCP (6), length 116)
96 192.168.56.119.49199 > 192.168.56.55.445: Flags [P.], cksum 0x2253 (incorrect -> 0x229b), seq 75:151, ack 168, win 253, length 76 SMB-over-TCP packet:(raw data or continuation?)