On 29 Oct, George Vieira wrote:
>  One point, I have seen many windows 9X machines where the SMB system is 
>  screwed and required removal of "File and Print Sharing" off the 
>  machine/Reboot/Reinstall it and it'll work again. 
>   
>  Usually after a boot up of Win9X, you have to wait a while before network 
>  neighbourhood collects a list of machines on the network.. if you can't get 
>  this list still after 5 minutes then you probably got this "File and Print 
>  Sharing" problem. You should also be able to see your self on the list, not 
>  just the linux box. 

So, this is what I get after turning off "File and printer sharing" and
then rebooting.  The 1st 3 broadcast lines are when I double-clicked on
"Entire network", which failed very quickly (under 1 sec).  the 2nd time
took maybe 5 - 10 secs to fail (I hit Return to force a blank lin ein
the output):

# /usr/sbin/tcpdump -n -i eth1
Kernel filter, protocol ALL, TURBO mode (575 frames), datagram packet socket
tcpdump: listening on eth1
23:37:23.557587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:37:23.567587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:37:23.617587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C

23:37:38.387587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:37:38.397587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:37:38.407587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:37:38.407587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:37:38.917587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:37:38.917587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:37:39.417587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:37:39.417587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:37:39.417587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:39.927587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:37:39.927587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:37:39.927587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:40.177587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:40.437587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:37:40.437587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:37:40.437587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:40.687587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:40.927587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:40.947587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:37:40.947587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:37:40.947587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:41.197587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:41.437587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:41.457587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:37:41.457587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:41.697587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:41.947587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:42.207587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:42.447587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:37:42.967587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST

Then I added "File and Printer sharing for Microsoft networks" back in
again.  BTW, it's configured with Browse Master turned off, and "LM
announce" set to Yes.  After rebooting and while logging in I started
tcpdump again and got this:

# /usr/sbin/tcpdump -n -i eth1
Kernel filter, protocol ALL, TURBO mode (575 frames), datagram packet socket
tcpdump: listening on eth1
23:43:17.017587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:43:17.017587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:43:17.017587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:17.267587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:17.517587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:43:17.517587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:43:17.517587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:17.767587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:18.017587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:18.017587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:43:18.017587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:43:18.017587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:18.277587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:18.517587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:18.527587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:43:18.527587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:43:18.777587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:18.787587 B arp who-has 192.168.1.1 tell 192.168.1.101
23:43:19.037587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:19.527587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:43:26.177587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:43:32.247587 > 192.168.1.100.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138) 
(DF)
23:43:32.247587 > 192.168.1.100.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138) 
(DF)
23:43:46.077587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:44:01.207587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)

Doing the same "double-click network neighbourhood" test again I
get this:

23:45:46.067587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:45:56.837587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:45:56.847587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:45:56.857587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:45:56.857587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:45:57.607587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:45:58.357587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:45:59.117587 B arp who-has 192.168.1.100 tell 192.168.1.101
23:45:59.117587 > arp reply 192.168.1.100 (0:e0:29:9e:ab:b9) is-at 0:e0:29:9e:ab:b9 
(0:c0:df:ea:84:a)
23:45:59.117587 < 192.168.1.101.1025 > 192.168.1.100.netbios-ssn: S 200701:200701(0) 
win 8192 <mss 1460> (DF)
23:45:59.117587 > 192.168.1.100 > 192.168.1.101: icmp: 192.168.1.100 tcp port 
netbios-ssn unreachable (DF) [tos 0xc0] 
23:46:01.387587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:02.367587 < 192.168.1.101.1025 > 192.168.1.100.netbios-ssn: S 200701:200701(0) 
win 8192 <mss 1460> (DF)
23:46:02.367587 > 192.168.1.100 > 192.168.1.101: icmp: 192.168.1.100 tcp port 
netbios-ssn unreachable (DF) [tos 0xc0] 
23:46:04.117587 > arp who-has 192.168.1.101 tell 192.168.1.100 (0:e0:29:9e:ab:b9)
23:46:04.117587 < arp reply 192.168.1.101 is-at 0:c0:df:ea:84:a (0:e0:29:9e:ab:b9)
23:46:08.967587 < 192.168.1.101.1025 > 192.168.1.100.netbios-ssn: S 200701:200701(0) 
win 8192 <mss 1460> (DF)
23:46:08.967587 > 192.168.1.100 > 192.168.1.101: icmp: 192.168.1.100 tcp port 
netbios-ssn unreachable (DF) [tos 0xc0] 
23:46:22.147587 < 192.168.1.101.1025 > 192.168.1.100.netbios-ssn: S 200701:200701(0) 
win 8192 <mss 1460> (DF)
23:46:22.147587 > 192.168.1.100 > 192.168.1.101: icmp: 192.168.1.100 tcp port 
netbios-ssn unreachable (DF) [tos 0xc0] 
23:46:31.417587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:46.067587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C
23:46:48.517587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:46:48.517587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:49.017587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:46:49.017587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:49.017587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:49.527587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:46:49.527587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:49.527587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:49.777587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:50.037587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:46:50.037587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:50.037587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:50.287587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:50.527587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:50.547587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:46:50.547587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:50.547587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:50.797587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:51.037587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:51.057587 B 0:c0:df:ea:84:a > Broadcast sap e0 ui/C IPX/SMB
23:46:51.057587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:46:51.287587 B arp who-has 192.168.1.1 tell 192.168.1.101
23:46:51.297587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:51.547587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:52.057587 B 192.168.1.101.netbios-ns > 192.168.1.127.netbios-ns:NBT UDP 
PACKET(137): QUERY; REQUEST; BROADCAST
23:46:57.977587 > 192.168.1.100.33725 > 203.2.75.132.domain: 51866+ A? 
mail.optushome.com.au. (39) (DF)
23:47:01.487587 B 192.168.1.101.netbios-dgm > 192.168.1.127.netbios-dgm: NBT UDP (138)
23:47:02.977587 > arp who-has 192.168.1.1 tell 192.168.1.100 (0:e0:29:9e:ab:b9)
23:47:02.977587 < arp reply 192.168.1.1 is-at 0:4:5a:25:35:b (0:e0:29:9e:ab:b9)
23:47:02.987587 > 192.168.1.100.33726 > 198.142.0.51.domain: 51866+ A? 
mail.optushome.com.au. (39) (DF)
23:47:03.007587 < 198.142.0.51.domain > 192.168.1.100.33726: 51866* 1/2/2 A 
203.2.75.209 (132)
23:47:03.007587 > 192.168.1.100.50056 > 203.2.75.209.pop3: S 1262889811:1262889811(0) 
win 5840 <mss 1460,sackOK,timestamp 30271088 0,nop,wscale 0> (DF)

I think mail started coming in then, so I've chopped it off.  Also,
that took maybe a minute on the Win95 machine before popping up the
"Unable to browse the network" error panel.

Is any of this helpful?  I really appreciate the help and advice you're
offering, BTW.

luke


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to