tcpdump -s0 -r ././eva_discover.pcap
reading from file ././eva_discover.pcap, link-type EN10MB (Ethernet)
10:45:02.814827 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:03.563700 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [2q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _ipp._tcp.local. (45)
10:45:05.819553 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:06.818823 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:07.818811 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:07.896068 IP 192.168.178.2.45042 > 255.255.255.255.5035: UDP, length 16
10:45:08.903407 IP 192.168.178.2.45042 > 255.255.255.255.5035: UDP, length 16
10:45:09.911840 IP 192.168.178.2.45042 > 255.255.255.255.5035: UDP, length 16
10:45:10.824717 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:10.917481 IP 192.168.178.2.45042 > 255.255.255.255.5035: UDP, length 16
10:45:11.822873 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:11.925253 IP 192.168.178.2.45042 > 255.255.255.255.5035: UDP, length 16
10:45:12.822823 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:12.932700 IP 192.168.178.2.45042 > 255.255.255.255.5035: UDP, length 16
10:45:13.939983 IP 192.168.178.2.45042 > 255.255.255.255.5035: UDP, length 16
10:45:14.153429 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:14.154090 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:14.301140 ARP, Reply 192.168.178.1 is-at 30:78:30:30:2c:20 (oui Unknown), length 46
10:45:14.301166 IP 192.168.178.1.5035 > 192.168.178.2.5035: UDP, length 16
10:45:14.301195 IP 192.168.178.1.5035 > 192.168.178.2.5035: UDP, length 16
10:45:15.825104 IP 192.168.178.2.42096 > 192.168.178.1.ftp: Flags [S], seq 2766485527, win 29200, options [mss 1460,sackOK,TS val 4294921718 ecr 0,nop,wscale 7], length 0
10:45:15.828656 IP 192.168.178.2.16113 > 192.168.178.1.domain: 34686+ A? ntp.ubuntu.com. (32)
10:45:15.828694 IP 192.168.178.2.10757 > 192.168.178.1.domain: 50068+ AAAA? ntp.ubuntu.com. (32)
10:45:16.822812 IP 192.168.178.2.42096 > 192.168.178.1.ftp: Flags [S], seq 2766485527, win 29200, options [mss 1460,sackOK,TS val 4294921968 ecr 0,nop,wscale 7], length 0
10:45:18.092493 IP 192.168.178.2.36865 > 192.168.178.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
10:45:18.093257 IP 192.168.178.3.netbios-ns > 192.168.178.2.36865: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
10:45:18.093659 ARP, Request who-has 192.168.178.3 tell 192.168.178.2, length 28
10:45:18.094111 ARP, Reply 192.168.178.3 is-at 08:96:d7:5c:59:f3 (oui Unknown), length 46
10:45:18.094125 IP 192.168.178.2.38438 > 192.168.178.3.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; UNICAST
10:45:18.095706 IP 192.168.178.3.netbios-ns > 192.168.178.2.38438: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
10:45:18.097248 IP 192.168.178.2.33227 > 192.168.178.1.domain: 8016+ A? FRITZ-NAS. (27)
10:45:18.097292 IP 192.168.178.2.58114 > 192.168.178.1.domain: 35740+ AAAA? FRITZ-NAS. (27)
10:45:18.826832 IP 192.168.178.2.42096 > 192.168.178.1.ftp: Flags [S], seq 2766485527, win 29200, options [mss 1460,sackOK,TS val 4294922469 ecr 0,nop,wscale 7], length 0
10:45:19.153856 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:19.154525 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:20.417386 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 314
10:45:20.417786 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 323
10:45:20.418152 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 366
10:45:20.419217 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 378
10:45:20.420363 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 380
10:45:20.421483 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 394
10:45:20.422535 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 358
10:45:20.424010 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 302
10:45:20.424419 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 311
10:45:20.424828 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 344
10:45:20.426384 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 344
10:45:20.427900 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 305
10:45:20.428310 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 315
10:45:20.428760 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 351
10:45:20.430648 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 312
10:45:20.431628 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 322
10:45:20.431996 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 358
10:45:20.433121 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 351
10:45:20.434131 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 358
10:45:20.435934 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 303
10:45:20.436339 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 312
10:45:20.436790 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 375
10:45:20.438388 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 310
10:45:20.438779 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 319
10:45:20.439085 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 382
10:45:20.440559 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 312
10:45:20.440928 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 351
10:45:20.442197 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 319
10:45:20.442525 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 358
10:45:20.443959 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 312
10:45:20.444368 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 371
10:45:20.445892 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 319
10:45:20.446218 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 378
10:45:20.447362 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 339
10:45:20.448260 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 346
10:45:20.449412 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 383
10:45:20.450446 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 390
10:45:20.451596 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 367
10:45:20.452619 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 374
10:45:20.453719 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 365
10:45:20.454768 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 372
10:45:20.456045 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 379
10:45:20.457034 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 386
10:45:20.458543 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 304
10:45:20.458913 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 313
10:45:20.459360 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 376
10:45:20.460958 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 311
10:45:20.461285 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 320
10:45:20.461613 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 383
10:45:20.463171 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 313
10:45:20.463578 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 352
10:45:20.464808 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 320
10:45:20.465135 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 359
10:45:20.466828 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 313
10:45:20.467224 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 372
10:45:20.468494 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 320
10:45:20.468822 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 379
10:45:20.469927 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 340
10:45:20.470871 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 347
10:45:20.471979 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 384
10:45:20.473001 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 391
10:45:20.474148 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 368
10:45:20.475092 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 375
10:45:20.476441 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 366
10:45:20.477424 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 373
10:45:20.478570 IP 192.168.178.3.1900 > 239.255.255.250.1900: UDP, length 380
10:45:20.479557 IP6 fe80::a96:d7ff:fe5c:59f3.1900 > ff02::c.1900: UDP, length 387
10:45:20.832978 IP 192.168.178.2.16113 > 192.168.178.1.domain: 34686+ A? ntp.ubuntu.com. (32)
10:45:20.833042 IP 192.168.178.2.10757 > 192.168.178.1.domain: 50068+ AAAA? ntp.ubuntu.com. (32)
10:45:22.838888 IP 192.168.178.2.42096 > 192.168.178.1.ftp: Flags [S], seq 2766485527, win 29200, options [mss 1460,sackOK,TS val 4294923472 ecr 0,nop,wscale 7], length 0
10:45:23.099218 IP 192.168.178.2.33227 > 192.168.178.1.domain: 8016+ A? FRITZ-NAS. (27)
10:45:23.099257 IP 192.168.178.2.58114 > 192.168.178.1.domain: 35740+ AAAA? FRITZ-NAS. (27)
10:45:23.105244 ARP, Request who-has 192.168.178.2 tell 192.168.178.3, length 46
10:45:23.105265 ARP, Reply 192.168.178.2 is-at 90:e6:ba:06:4e:e1 (oui Unknown), length 28
10:45:24.153713 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:24.154419 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:25.838986 IP 192.168.178.2.23269 > 192.168.178.1.domain: 5210+ A? ntp.ubuntu.com. (32)
10:45:25.839114 IP 192.168.178.2.64740 > 192.168.178.1.domain: 60238+ AAAA? ntp.ubuntu.com. (32)
10:45:28.104464 IP 192.168.178.2.38639 > 192.168.178.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
10:45:28.105455 IP 192.168.178.3.netbios-ns > 192.168.178.2.38639: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
10:45:28.105736 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [S], seq 3743179148, win 29200, options [mss 1460,sackOK,TS val 4294924788 ecr 0,nop,wscale 7], length 0
10:45:28.106203 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [S.], seq 2039239928, ack 3743179149, win 14480, options [mss 1460,sackOK,TS val 300630 ecr 4294924788,nop,wscale 4], length 0
10:45:28.106247 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [.], ack 1, win 229, options [nop,nop,TS val 4294924788 ecr 300630], length 0
10:45:28.106368 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 1:73, ack 1, win 229, options [nop,nop,TS val 4294924788 ecr 300630], length 72 NBT Session Packet: Session Request
10:45:28.106934 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [.], ack 73, win 905, options [nop,nop,TS val 300630 ecr 4294924788], length 0
10:45:28.286457 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 1:5, ack 73, win 905, options [nop,nop,TS val 300648 ecr 4294924788], length 4 NBT Session Packet: Session Granted
10:45:28.286486 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [.], ack 5, win 229, options [nop,nop,TS val 4294924833 ecr 300648], length 0
10:45:28.286926 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 73:267, ack 5, win 229, options [nop,nop,TS val 4294924834 ecr 300648], length 194 NBT Session Packet: Session Message
10:45:28.287300 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [.], ack 267, win 972, options [nop,nop,TS val 300648 ecr 4294924834], length 0
10:45:28.288540 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 5:136, ack 267, win 972, options [nop,nop,TS val 300648 ecr 4294924834], length 131 NBT Session Packet: Session Message
10:45:28.326775 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [.], ack 136, win 237, options [nop,nop,TS val 4294924844 ecr 300648], length 0
10:45:28.468114 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 267:427, ack 136, win 237, options [nop,nop,TS val 4294924879 ecr 300648], length 160 NBT Session Packet: Session Message
10:45:28.471036 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 136:416, ack 427, win 1039, options [nop,nop,TS val 300666 ecr 4294924879], length 280 NBT Session Packet: Session Message
10:45:28.471122 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [.], ack 416, win 245, options [nop,nop,TS val 4294924880 ecr 300666], length 0
10:45:28.472082 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 427:587, ack 416, win 245, options [nop,nop,TS val 4294924880 ecr 300666], length 160 NBT Session Packet: Session Message
10:45:28.473206 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 416:696, ack 587, win 1106, options [nop,nop,TS val 300666 ecr 4294924880], length 280 NBT Session Packet: Session Message
10:45:28.473515 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 587:831, ack 696, win 254, options [nop,nop,TS val 4294924880 ecr 300666], length 244 NBT Session Packet: Session Message
10:45:28.478597 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 696:808, ack 831, win 1173, options [nop,nop,TS val 300667 ecr 4294924880], length 112 NBT Session Packet: Session Message
10:45:28.478859 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 831:919, ack 808, win 254, options [nop,nop,TS val 4294924882 ecr 300667], length 88 NBT Session Packet: Session Message
10:45:28.481310 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 808:868, ack 919, win 1173, options [nop,nop,TS val 300667 ecr 4294924882], length 60 NBT Session Packet: Session Message
10:45:28.481661 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 919:1051, ack 868, win 254, options [nop,nop,TS val 4294924882 ecr 300667], length 132 NBT Session Packet: Session Message
10:45:28.483236 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 868:972, ack 1051, win 1240, options [nop,nop,TS val 300667 ecr 4294924882], length 104 NBT Session Packet: Session Message
10:45:28.485039 IP 192.168.178.2.40180 > 192.168.178.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
10:45:28.485837 IP 192.168.178.3.netbios-ns > 192.168.178.2.40180: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
10:45:28.486252 IP 192.168.178.2.39433 > 192.168.178.3.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; UNICAST
10:45:28.487544 IP 192.168.178.3.netbios-ns > 192.168.178.2.39433: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
10:45:28.488710 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 1051:1108, ack 972, win 254, options [nop,nop,TS val 4294924884 ecr 300667], length 57 NBT Session Packet: Session Message
10:45:28.489400 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 972:1029, ack 1108, win 1240, options [nop,nop,TS val 300668 ecr 4294924884], length 57 NBT Session Packet: Session Message
10:45:28.491262 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [P.], seq 1108:1240, ack 1029, win 254, options [nop,nop,TS val 4294924885 ecr 300668], length 132 NBT Session Packet: Session Message
10:45:28.492382 IP 192.168.178.3.netbios-ssn > 192.168.178.2.59814: Flags [P.], seq 1029:1133, ack 1240, win 1307, options [nop,nop,TS val 300668 ecr 4294924885], length 104 NBT Session Packet: Session Message
10:45:28.530776 IP 192.168.178.2.59814 > 192.168.178.3.netbios-ssn: Flags [.], ack 1133, win 254, options [nop,nop,TS val 4294924895 ecr 300668], length 0
10:45:28.675447 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:28.675616 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:29.153724 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:29.154325 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:29.676940 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:29.677025 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:30.844052 IP 192.168.178.2.23269 > 192.168.178.1.domain: 5210+ A? ntp.ubuntu.com. (32)
10:45:30.844153 IP 192.168.178.2.64740 > 192.168.178.1.domain: 60238+ AAAA? ntp.ubuntu.com. (32)
10:45:30.854835 IP 192.168.178.2.42096 > 192.168.178.1.ftp: Flags [S], seq 2766485527, win 29200, options [mss 1460,sackOK,TS val 4294925476 ecr 0,nop,wscale 7], length 0
10:45:31.678634 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:31.678846 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:34.153583 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:34.154256 IP 192.168.178.3.36666 > 239.255.255.250.1900: UDP, length 130
10:45:35.679308 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:35.679483 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:35.849432 IP 192.168.178.2.7974 > 192.168.178.1.domain: 19133+ A? ntp.ubuntu.com. (32)
10:45:35.849549 IP 192.168.178.2.32462 > 192.168.178.1.domain: 60442+ AAAA? ntp.ubuntu.com. (32)
10:45:40.854483 IP 192.168.178.2.7974 > 192.168.178.1.domain: 19133+ A? ntp.ubuntu.com. (32)
10:45:40.854587 IP 192.168.178.2.32462 > 192.168.178.1.domain: 60442+ AAAA? ntp.ubuntu.com. (32)
10:45:40.854805 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:41.854819 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:42.854818 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:43.681697 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:43.681870 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:45.860647 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:45:45.861488 ARP, Reply 192.168.178.1 is-at 30:78:30:30:2c:20 (oui Unknown), length 46
10:45:45.861502 IP 192.168.178.2.13902 > 192.168.178.1.domain: 35814+ A? ntp.ubuntu.com. (32)
10:45:45.861506 IP 192.168.178.2.31219 > 192.168.178.1.domain: 33527+ AAAA? ntp.ubuntu.com. (32)
10:45:46.902892 IP 192.168.178.2.42096 > 192.168.178.1.ftp: Flags [S], seq 2766485527, win 29200, options [mss 1460,sackOK,TS val 4294929488 ecr 0,nop,wscale 7], length 0
10:45:50.862167 IP 192.168.178.2.13902 > 192.168.178.1.domain: 35814+ A? ntp.ubuntu.com. (32)
10:45:50.862266 IP 192.168.178.2.31219 > 192.168.178.1.domain: 33527+ AAAA? ntp.ubuntu.com. (32)
10:45:55.867536 IP 192.168.178.2.34927 > 192.168.178.1.domain: 31618+ A? ntp.ubuntu.com. (32)
10:45:55.867606 IP 192.168.178.2.56139 > 192.168.178.1.domain: 51937+ AAAA? ntp.ubuntu.com. (32)
10:45:59.683871 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:45:59.684014 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:46:00.872621 IP 192.168.178.2.34927 > 192.168.178.1.domain: 31618+ A? ntp.ubuntu.com. (32)
10:46:00.872750 IP 192.168.178.2.56139 > 192.168.178.1.domain: 51937+ AAAA? ntp.ubuntu.com. (32)
10:46:01.826666 IP 192.168.178.3 > 224.0.0.1: igmp query v3
10:46:05.783441 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [2q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _ipp._tcp.local. (45)
10:46:05.878481 IP 192.168.178.2.51697 > 192.168.178.1.domain: 31211+ A? ntp.ubuntu.com. (32)
10:46:05.878596 IP 192.168.178.2.60391 > 192.168.178.1.domain: 22199+ AAAA? ntp.ubuntu.com. (32)
10:46:07.158814 IP 192.168.178.2 > 224.0.0.22: igmp v3 report, 1 group record(s)
10:46:07.564872 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [2q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _ipp._tcp.local. (45)
10:46:08.524495 IP 192.168.178.3.netbios-dgm > 192.168.178.255.netbios-dgm: NBT UDP PACKET(138)
10:46:08.524518 IP 192.168.178.3.netbios-dgm > 192.168.178.255.netbios-dgm: NBT UDP PACKET(138)
10:46:10.883603 IP 192.168.178.2.51697 > 192.168.178.1.domain: 31211+ A? ntp.ubuntu.com. (32)
10:46:10.883703 IP 192.168.178.2.60391 > 192.168.178.1.domain: 22199+ AAAA? ntp.ubuntu.com. (32)
10:46:15.888946 IP 192.168.178.2.6765 > 192.168.178.1.domain: 58088+ A? ntp.ubuntu.com. (32)
10:46:15.889032 IP 192.168.178.2.43900 > 192.168.178.1.domain: 38882+ AAAA? ntp.ubuntu.com. (32)
10:46:15.894798 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:16.894793 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:17.894794 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:18.966876 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:18.967714 ARP, Reply 192.168.178.1 is-at 30:78:30:30:2c:20 (oui Unknown), length 46
10:46:18.967736 IP 192.168.178.2.42096 > 192.168.178.1.ftp: Flags [S], seq 2766485527, win 29200, options [mss 1460,sackOK,TS val 4294937504 ecr 0,nop,wscale 7], length 0
10:46:20.894000 IP 192.168.178.2.6765 > 192.168.178.1.domain: 58088+ A? ntp.ubuntu.com. (32)
10:46:20.894096 IP 192.168.178.2.43900 > 192.168.178.1.domain: 38882+ AAAA? ntp.ubuntu.com. (32)
10:46:25.899875 IP 192.168.178.2.40178 > 192.168.178.1.domain: 22247+ A? ntp.ubuntu.com. (32)
10:46:25.899943 IP 192.168.178.2.16351 > 192.168.178.1.domain: 58981+ AAAA? ntp.ubuntu.com. (32)
10:46:30.904975 IP 192.168.178.2.40178 > 192.168.178.1.domain: 22247+ A? ntp.ubuntu.com. (32)
10:46:30.905023 IP 192.168.178.2.16351 > 192.168.178.1.domain: 58981+ AAAA? ntp.ubuntu.com. (32)
10:46:31.700492 IP6 fe80::92e6:baff:fe06:4ee1.mdns > ff02::fb.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:46:31.700618 IP 192.168.178.2.mdns > 224.0.0.251.mdns: 0 [7q] PTR (QM)? _ftp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _webdav._tcp.local. (118)
10:46:35.910350 IP 192.168.178.2.11168 > 192.168.178.1.domain: 35254+ A? ntp.ubuntu.com. (32)
10:46:35.910415 IP 192.168.178.2.29444 > 192.168.178.1.domain: 4656+ AAAA? ntp.ubuntu.com. (32)
10:46:40.915423 IP 192.168.178.2.11168 > 192.168.178.1.domain: 35254+ A? ntp.ubuntu.com. (32)
10:46:40.915474 IP 192.168.178.2.29444 > 192.168.178.1.domain: 4656+ AAAA? ntp.ubuntu.com. (32)
10:46:45.921286 IP 192.168.178.2.44536 > 192.168.178.1.domain: 19033+ A? ntp.ubuntu.com. (32)
10:46:45.921406 IP 192.168.178.2.27832 > 192.168.178.1.domain: 65284+ AAAA? ntp.ubuntu.com. (32)
10:46:45.926806 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:46.926788 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:47.926785 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:50.926398 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:46:50.927252 ARP, Reply 192.168.178.1 is-at 30:78:30:30:2c:20 (oui Unknown), length 46
10:46:50.927266 IP 192.168.178.2.44536 > 192.168.178.1.domain: 19033+ A? ntp.ubuntu.com. (32)
10:46:50.927270 IP 192.168.178.2.27832 > 192.168.178.1.domain: 65284+ AAAA? ntp.ubuntu.com. (32)
10:46:55.931711 IP 192.168.178.2.60460 > 192.168.178.1.domain: 40113+ A? ntp.ubuntu.com. (32)
10:46:55.931808 IP 192.168.178.2.29795 > 192.168.178.1.domain: 39924+ AAAA? ntp.ubuntu.com. (32)
10:47:00.936807 IP 192.168.178.2.60460 > 192.168.178.1.domain: 40113+ A? ntp.ubuntu.com. (32)
10:47:00.936909 IP 192.168.178.2.29795 > 192.168.178.1.domain: 39924+ AAAA? ntp.ubuntu.com. (32)
10:47:05.942643 IP 192.168.178.2.32096 > 192.168.178.1.domain: 14308+ A? ntp.ubuntu.com. (32)
10:47:05.942710 IP 192.168.178.2.23065 > 192.168.178.1.domain: 62740+ AAAA? ntp.ubuntu.com. (32)
10:47:10.947726 IP 192.168.178.2.32096 > 192.168.178.1.domain: 14308+ A? ntp.ubuntu.com. (32)
10:47:10.947777 IP 192.168.178.2.23065 > 192.168.178.1.domain: 62740+ AAAA? ntp.ubuntu.com. (32)
10:47:15.953092 IP 192.168.178.2.47254 > 192.168.178.1.domain: 24770+ A? ntp.ubuntu.com. (32)
10:47:15.953155 IP 192.168.178.2.10790 > 192.168.178.1.domain: 49852+ AAAA? ntp.ubuntu.com. (32)
10:47:20.958153 IP 192.168.178.2.47254 > 192.168.178.1.domain: 24770+ A? ntp.ubuntu.com. (32)
10:47:20.958203 IP 192.168.178.2.10790 > 192.168.178.1.domain: 49852+ AAAA? ntp.ubuntu.com. (32)
10:47:20.966809 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:47:21.966808 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:47:22.966801 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:47:25.963884 ARP, Request who-has 192.168.178.1 tell 192.168.178.2, length 28
10:47:25.964908 ARP, Reply 192.168.178.1 is-at 30:78:30:30:2c:20 (oui Unknown), length 46
10:47:25.964930 IP 192.168.178.2.24035 > 192.168.178.1.domain: 33673+ A? ntp.ubuntu.com. (32)
10:47:25.964937 IP 192.168.178.2.14453 > 192.168.178.1.domain: 47091+ AAAA? ntp.ubuntu.com. (32)
10:47:30.968954 IP 192.168.178.2.24035 > 192.168.178.1.domain: 33673+ A? ntp.ubuntu.com. (32)
10:47:30.969008 IP 192.168.178.2.14453 > 192.168.178.1.domain: 47091+ AAAA? ntp.ubuntu.com. (32)