On Thu, Feb 20, 2003 at 07:18:06AM +1100, Ronnie Sahlberg wrote: > In your capture, UserID in the SMB header is different between Cal/Reply
I think you meant "Process ID" there, if you're thinking of the transaction responses in frames 18, 20, 22, 24, 26, 34, 36, 38, 40, 42, 50, 54, and 56. They all have process ID values not found in any packets other than transaction responses.
