
While playing around with wireshark briefly as a possible tool to use around here, I ran into something rather interesting/weird. Below is a packet Outlook sent to Exchange today from my box. "Windows for Workgroups 3.1a" !?! There's some old stuff in that protocol. I'm pretty sure we don't have Windows 3.anything running here.
0000 00 00 0c 07 ac 00 00 1c 23 28 c2 c6 08 00 45 00 ........ #(....E.
0010 00 b1 86 15 40 00 80 06 bc e3 9d ab 27 bf 9d ab ....@... ....'...
0020 54 38 0a 08 01 bd 05 82 c8 ae 9b 35 cb 90 50 18 T8...... ...5..P.
0030 ff ff ef 02 00 00 00 00 00 85 ff 53 4d 42 72 00 ........ ...SMBr.
0040 00 00 00 18 53 c8 00 00 00 00 00 00 00 00 00 00 ....S... ........
0050 00 00 00 00 ff fe 00 00 00 00 00 62 00 02 50 43 ........ ...b..PC
0060 20 4e 45 54 57 4f 52 4b 20 50 52 4f 47 52 41 4d NETWORK PROGRAM
0070 20 31 2e 30 00 02 4c 41 4e 4d 41 4e 31 2e 30 00 1.0..LA NMAN1.0.
0080 02 57 69 6e 64 6f 77 73 20 66 6f 72 20 57 6f 72 .Windows for Wor
0090 6b 67 72 6f 75 70 73 20 33 2e 31 61 00 02 4c 4d kgroups 3.1a..LM
00a0 31 2e 32 58 30 30 32 00 02 4c 41 4e 4d 41 4e 32 1.2X002. .LANMAN2
00b0 2e 31 00 02 4e 54 20 4c 4d 20 30 2e 31 32 00 .1..NT L M 0.12.