From Offset
My workgroup
- \\BUTTERCUP (192.168.0.107) — Windows 2000 Professional SP4 desktop
- Workgroup set to WORKGROUP
- Server service STARTED
- Computer Browser service STARTED
- NetBIOS over TCP/IP is ENABLED
- LMHOSTS lookup is NOT ENABLED
- HP LaserJet 6P attached and shared as HPLJ6P
- Registry settings:
- HKLM\SYSTEM\CurrentControlSet\Control\Lsa\restrictanonymous = 0
- HKLM\SYSTEM\CurrentControlSet\Services\Browser\Parameters\IsDomainMaster = yes
- HKLM\SYSTEM\CurrentControlSet\Services\Browser\Parameters\MaintainServerList = Auto
- HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\Hidden does not exist
- HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\IRPStackSize = 0x32 (added 2006-06-02)
- HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\RestrictNullSessAccess does not exist (was: 0x1)
- HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\MinFreeConnections = 0x100
- HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\MaxFreeConnections = 0x200
- HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\MaxWorkItems = 0x1000
- logged on as user Mike Brown
- Firewalls:
- Kerio Personal Firewall - OFF, unloaded
- PeerGuardian - OFF, unloaded
- Proxy: Google Web Accelerator - OFF, unloaded
- \\CRAZY-BUS (192.168.0.103) — Windows XP Home SP2 laptop
- Workgroup set to WORKGROUP
- Computer Browser service DISABLED
- NetBIOS over TCP/IP is ON
- logged on as user Mike Brown, same password as on BUTTERCUP (was: no password)
- Firewalls:
- Kerio Personal Firewall - OFF, unloaded
- PeerGuardian - OFF, unloaded
- Windows Firewall - OFF
- \\ONLYEMARIE (192.168.0.106) — Windows XP Home SP2 laptop
- Workgroup set to WORKGROUP
- Computer Browser service DISABLED
- NetBIOS over TCP/IP is ON
- logged on as ?
- Firewalls:
- Windows Firewall - ON, with File and Printer Sharing exception enabled
- PeerGuardian - ON
May 27 experiments
Boot order
- ONLYEMARIE
- CRAZY-BUS
- BUTTERCUP
BUTTERCUP ipconfig /all
Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : buttercup
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hsd1.co.comcast.net.
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : hsd1.co.comcast.net.
Description . . . . . . . . . . . : 3Com EtherLink 10/100 PCI For Complete PC Management NIC (3C905C-TX)
Physical Address. . . . . . . . . : 00-01-02-C7-30-45
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.107
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : Saturday, May 27, 2006 18:40:30
Lease Expires . . . . . . . . . . : Monday, May 29, 2006 18:40:30
BUTTERCUP cdiag
CDiagnosis V1.40
Start diagnosis for BUTTERCUP
Full Targets buttercup 192.168.0.107 crazy-bus 192.168.0.103 onlyemarie 192.168.0.106 127.0.0.1
Ping Targets www.yahoo.com 66.94.230.32
Over All Analysis
Enumerate Shares
Share name Resource Remark
-------------------------------------------------------------------------------
print$ C:\WINNT\system32\spool\drivers Printer Drivers
IPC$ Remote IPC
F$ F:\ Default share
ADMIN$ C:\WINNT Remote Admin
C$ C:\ Default share
_SOFTWARE C:\_SOFTWARE
misc rarities
F:\misc rarities
My Music C:\Documents and Settings\Mike Brown\My Documents\My Music
My Videos C:\Documents and Settings\Mike Brown\My Documents\My Videos
public C:\Documents and Settings\Mike Brown\My Documents\_Freelance work\2005-2006 MVSC-CADMV BPA project\public
MVSC-CADMV BPA project
HPLJ6P LPT1: Spooled Van Langendonck
The command completed successfully.
Adhoc Browser View
Server Name Remark
-------------------------------------------------------------------------------
\\BUTTERCUP
\\CRAZY-BUS Absolutely Bus-A-Looie
\\ONLYEMARIE
The command completed successfully.
Full Targets Analysis buttercup 192.168.0.107 crazy-bus 192.168.0.103 onlyemarie 192.168.0.106 127.0.0.1
Target buttercup
"BUTTERCUP ping buttercup"
Pinging buttercup [192.168.0.107] with 32 bytes of data:
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Ping statistics for 192.168.0.107:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"BUTTERCUP net view buttercup"
Shared resources at buttercup
Share name Type Used as Comment
-------------------------------------------------------------------------------
_SOFTWARE Disk
HPLJ6P Print Van Langendonck
misc rarities
Disk
My Music Disk
My Videos Disk
public Disk MVSC-CADMV BPA project
The command completed successfully.
Target 192.168.0.107
"BUTTERCUP ping 192.168.0.107"
Pinging 192.168.0.107 with 32 bytes of data:
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Reply from 192.168.0.107: bytes=32 time<10ms TTL=128
Ping statistics for 192.168.0.107:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"BUTTERCUP net view 192.168.0.107"
Shared resources at 192.168.0.107
Share name Type Used as Comment
-------------------------------------------------------------------------------
_SOFTWARE Disk
HPLJ6P Print Van Langendonck
misc rarities
Disk
My Music Disk
My Videos Disk
public Disk MVSC-CADMV BPA project
The command completed successfully.
Target crazy-bus
"BUTTERCUP ping crazy-bus"
Pinging crazy-bus [192.168.0.103] with 32 bytes of data:
Reply from 192.168.0.103: bytes=32 time=8ms TTL=128
Reply from 192.168.0.103: bytes=32 time=5ms TTL=128
Reply from 192.168.0.103: bytes=32 time=3ms TTL=128
Reply from 192.168.0.103: bytes=32 time=3ms TTL=128
Ping statistics for 192.168.0.103:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 3ms, Maximum = 8ms, Average = 4ms
"BUTTERCUP net view crazy-bus"
Shared resources at crazy-bus
Absolutely Bus-A-Looie
Share name Type Used as Comment
-------------------------------------------------------------------------------
SharedDocs Disk
The command completed successfully.
Target 192.168.0.103
"BUTTERCUP ping 192.168.0.103"
Pinging 192.168.0.103 with 32 bytes of data:
Reply from 192.168.0.103: bytes=32 time=2ms TTL=128
Reply from 192.168.0.103: bytes=32 time=3ms TTL=128
Reply from 192.168.0.103: bytes=32 time=3ms TTL=128
Reply from 192.168.0.103: bytes=32 time=3ms TTL=128
Ping statistics for 192.168.0.103:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 3ms, Average = 2ms
"BUTTERCUP net view 192.168.0.103"
Shared resources at 192.168.0.103
Absolutely Bus-A-Looie
Share name Type Used as Comment
-------------------------------------------------------------------------------
SharedDocs Disk
The command completed successfully.
Target onlyemarie
"BUTTERCUP ping onlyemarie"
Pinging onlyemarie [192.168.0.106] with 32 bytes of data:
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Ping statistics for 192.168.0.106:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"BUTTERCUP net view onlyemarie"
Shared resources at onlyemarie
Share name Type Used as Comment
-------------------------------------------------------------------------------
Documents Disk
The command completed successfully.
Target 192.168.0.106
"BUTTERCUP ping 192.168.0.106"
Pinging 192.168.0.106 with 32 bytes of data:
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Reply from 192.168.0.106: bytes=32 time<10ms TTL=128
Ping statistics for 192.168.0.106:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"BUTTERCUP net view 192.168.0.106"
Shared resources at 192.168.0.106
Share name Type Used as Comment
-------------------------------------------------------------------------------
Documents Disk
The command completed successfully.
Target 127.0.0.1
"BUTTERCUP ping 127.0.0.1"
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<10ms TTL=128
Reply from 127.0.0.1: bytes=32 time<10ms TTL=128
Reply from 127.0.0.1: bytes=32 time<10ms TTL=128
Reply from 127.0.0.1: bytes=32 time<10ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"BUTTERCUP net view 127.0.0.1"
Shared resources at 127.0.0.1
Share name Type Used as Comment
-------------------------------------------------------------------------------
_SOFTWARE Disk
HPLJ6P Print Van Langendonck
misc rarities
Disk
My Music Disk
My Videos Disk
public Disk MVSC-CADMV BPA project
The command completed successfully.
Ping Targets Analysis www.yahoo.com 66.94.230.32
Target www.yahoo.com
"BUTTERCUP ping www.yahoo.com"
Pinging www.yahoo.akadns.net [68.142.197.69] with 32 bytes of data:
Reply from 68.142.197.69: bytes=32 time=56ms TTL=49
Reply from 68.142.197.69: bytes=32 time=65ms TTL=49
Reply from 68.142.197.69: bytes=32 time=57ms TTL=49
Reply from 68.142.197.69: bytes=32 time=57ms TTL=49
Ping statistics for 68.142.197.69:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 56ms, Maximum = 65ms, Average = 58ms
Target 66.94.230.32
"BUTTERCUP ping 66.94.230.32"
Pinging 66.94.230.32 with 32 bytes of data:
Reply from 66.94.230.32: bytes=32 time=39ms TTL=48
Reply from 66.94.230.32: bytes=32 time=38ms TTL=48
Reply from 66.94.230.32: bytes=32 time=39ms TTL=48
Reply from 66.94.230.32: bytes=32 time=40ms TTL=48
Ping statistics for 66.94.230.32:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 38ms, Maximum = 40ms, Average = 39ms
End diagnosis for BUTTERCUP
BUTTERCUP browstat status
Status for domain WORKGROUP on transport \Device\NetBT_Tcpip_{4B5E84F3-49FF-41A1-B679-90B3A457FDF7}
Browsing is active on domain.
Master browser name is: BUTTERCUP
Master browser is running build 2195
1 backup servers retrieved from master BUTTERCUP
\\BUTTERCUP
There are 3 servers in domain WORKGROUP on transport \Device\NetBT_Tcpip_{4B5E84F3-49FF-41A1-B679-90B3A457FDF7}
There are 1 domains in domain WORKGROUP on transport \Device\NetBT_Tcpip_{4B5E84F3-49FF-41A1-B679-90B3A457FDF7}
CRAZY-BUS ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : CRAZY-BUS
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hsd1.co.comcast.net.
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . : hsd1.co.comcast.net.
Description . . . . . . . . . . . : Intel(R) PRO/Wireless LAN 2100 3B Mini PCI Adapter
Physical Address. . . . . . . . . : 00-04-23-48-02-25
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.103
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : Saturday, May 27, 2006 6:40:14 PM
Lease Expires . . . . . . . . . . : Monday, May 29, 2006 6:40:14 PM
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection
Physical Address. . . . . . . . . : 00-08-0D-4F-65-13
CRAZY-BUS cdiag
CDiagnosis V1.40
Start diagnosis for CRAZY-BUS
Full Targets buttercup 192.168.0.107 crazy-bus 192.168.0.103 onlyemarie 192.168.0.106 127.0.0.1
Ping Targets www.yahoo.com 66.94.230.32
Over All Analysis
Enumerate Shares
Share name Resource Remark
-------------------------------------------------------------------------------
IPC$ Remote IPC
SharedDocs C:\DOCUMENTS AND SETTINGS\ALL USERS\DOCUMENTS
The command completed successfully.
Adhoc Browser View
Server Name Remark
-------------------------------------------------------------------------------
\\BUTTERCUP
\\CRAZY-BUS Absolutely Bus-A-Looie
\\ONLYEMARIE
The command completed successfully.
Full Targets Analysis buttercup 192.168.0.107 crazy-bus 192.168.0.103 onlyemarie 192.168.0.106 127.0.0.1
Target buttercup
"CRAZY-BUS ping buttercup"
Pinging buttercup [192.168.0.107] with 32 bytes of data:
Reply from 192.168.0.107: bytes=32 time=2ms TTL=128
Reply from 192.168.0.107: bytes=32 time=2ms TTL=128
Reply from 192.168.0.107: bytes=32 time=3ms TTL=128
Reply from 192.168.0.107: bytes=32 time=3ms TTL=128
Ping statistics for 192.168.0.107:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 3ms, Average = 2ms
"CRAZY-BUS net view buttercup"
Shared resources at buttercup
Share name Type Used as Comment
-------------------------------------------------------------------------------
_SOFTWARE Disk
HPLJ6P Print Van Langendonck
misc rarities Disk
My Music Disk
My Videos Disk
public Disk MVSC-CADMV BPA project
The command completed successfully.
Target 192.168.0.107
"CRAZY-BUS ping 192.168.0.107"
Pinging 192.168.0.107 with 32 bytes of data:
Reply from 192.168.0.107: bytes=32 time=2ms TTL=128
Reply from 192.168.0.107: bytes=32 time=3ms TTL=128
Reply from 192.168.0.107: bytes=32 time=2ms TTL=128
Reply from 192.168.0.107: bytes=32 time=2ms TTL=128
Ping statistics for 192.168.0.107:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 3ms, Average = 2ms
"CRAZY-BUS net view 192.168.0.107"
Shared resources at 192.168.0.107
Share name Type Used as Comment
-------------------------------------------------------------------------------
_SOFTWARE Disk
HPLJ6P Print Van Langendonck
misc rarities Disk
My Music Disk
My Videos Disk
public Disk MVSC-CADMV BPA project
The command completed successfully.
Target crazy-bus
"CRAZY-BUS ping crazy-bus"
Pinging CRAZY-BUS [192.168.0.103] with 32 bytes of data:
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Ping statistics for 192.168.0.103:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"CRAZY-BUS net view crazy-bus"
Shared resources at crazy-bus
Absolutely Bus-A-Looie
Share name Type Used as Comment
-------------------------------------------------------------------------------
SharedDocs Disk
The command completed successfully.
Target 192.168.0.103
"CRAZY-BUS ping 192.168.0.103"
Pinging 192.168.0.103 with 32 bytes of data:
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Reply from 192.168.0.103: bytes=32 time<1ms TTL=128
Ping statistics for 192.168.0.103:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"CRAZY-BUS net view 192.168.0.103"
Shared resources at 192.168.0.103
Absolutely Bus-A-Looie
Share name Type Used as Comment
-------------------------------------------------------------------------------
SharedDocs Disk
The command completed successfully.
Target onlyemarie
"CRAZY-BUS ping onlyemarie"
Pinging onlyemarie [192.168.0.106] with 32 bytes of data:
Reply from 192.168.0.106: bytes=32 time=10ms TTL=128
Reply from 192.168.0.106: bytes=32 time=4ms TTL=128
Reply from 192.168.0.106: bytes=32 time=3ms TTL=128
Reply from 192.168.0.106: bytes=32 time=2ms TTL=128
Ping statistics for 192.168.0.106:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 10ms, Average = 4ms
"CRAZY-BUS net view onlyemarie"
Shared resources at onlyemarie
Share name Type Used as Comment
-------------------------------------------------------------------------------
Documents Disk
The command completed successfully.
Target 192.168.0.106
"CRAZY-BUS ping 192.168.0.106"
Pinging 192.168.0.106 with 32 bytes of data:
Reply from 192.168.0.106: bytes=32 time=2ms TTL=128
Reply from 192.168.0.106: bytes=32 time=2ms TTL=128
Reply from 192.168.0.106: bytes=32 time=2ms TTL=128
Reply from 192.168.0.106: bytes=32 time=2ms TTL=128
Ping statistics for 192.168.0.106:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 2ms, Average = 2ms
"CRAZY-BUS net view 192.168.0.106"
Shared resources at 192.168.0.106
Share name Type Used as Comment
-------------------------------------------------------------------------------
Documents Disk
The command completed successfully.
Target 127.0.0.1
"CRAZY-BUS ping 127.0.0.1"
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
"CRAZY-BUS net view 127.0.0.1"
Shared resources at 127.0.0.1
Absolutely Bus-A-Looie
Share name Type Used as Comment
-------------------------------------------------------------------------------
SharedDocs Disk
The command completed successfully.
Ping Targets Analysis www.yahoo.com 66.94.230.32
Target www.yahoo.com
"CRAZY-BUS ping www.yahoo.com"
Pinging www.yahoo.akadns.net [68.142.226.32] with 32 bytes of data:
Reply from 68.142.226.32: bytes=32 time=47ms TTL=48
Reply from 68.142.226.32: bytes=32 time=48ms TTL=48
Reply from 68.142.226.32: bytes=32 time=47ms TTL=48
Reply from 68.142.226.32: bytes=32 time=51ms TTL=48
Ping statistics for 68.142.226.32:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 47ms, Maximum = 51ms, Average = 48ms
Target 66.94.230.32
"CRAZY-BUS ping 66.94.230.32"
Pinging 66.94.230.32 with 32 bytes of data:
Reply from 66.94.230.32: bytes=32 time=39ms TTL=48
Reply from 66.94.230.32: bytes=32 time=37ms TTL=48
Reply from 66.94.230.32: bytes=32 time=38ms TTL=48
Reply from 66.94.230.32: bytes=32 time=38ms TTL=49
Ping statistics for 66.94.230.32:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 37ms, Maximum = 39ms, Average = 38ms
End diagnosis for CRAZY-BUS
CRAZY-BUS browstat status
Status for domain WORKGROUP on transport \Device\NetBT_Tcpip_{A9E6EB1C-80CC-4197-A3AE-80581F137F46}
Browsing is active on domain.
Master browser name is: BUTTERCUP
Master browser is running build 2195
1 backup servers retrieved from master BUTTERCUP
\\BUTTERCUP
There are 3 servers in domain WORKGROUP on transport \Device\NetBT_Tcpip_{A9E6EB1C-80CC-4197-A3AE-80581F137F46}
There are 1 domains in domain WORKGROUP on transport \Device\NetBT_Tcpip_{A9E6EB1C-80CC-4197-A3AE-80581F137F46}
