This looks like "normal" netbios interrogation traffic. This should be on port 139. As for decoding it use a calculator such as the one supplied in windows. Click on view then click
on scientific. Input the value into hex and then press decimal for a decimal version. Or just d/l ethereal and input the file into it. This option is probably your best bet. I assume you sanitized
the ip addresses in the field starting with 08 00 45 00 This should be your src addy. It does not match up with what you wrote though.