<div dir="ltr"><div style>Hi <span style="font-family:arial,sans-serif;font-size:13px">Torsten,</span></div><div><br></div>The only really effective way to decipher this sort of problem is to get a proper network packet capture. Try something like the following on the Linux client:<div>
<br></div><div style> # tcpdump -s 0 -w /tmp/out.pcap ! port ssh and ! port 2049 and ! port whateverotherportyoudontwant</div><div style><br></div><div style>Then in a separate terminal run ListFiles, wait the 90 seconds for it to complete and then Ctrl-C the capture and send the pcap to me directly.</div>
<div style><br></div><div style>Do not post captures to the mailing list. Send it to me only.</div><div style><br></div><div style>I will look at the capture and try to see what the problem is. It's probably some name service problem. Or rather JCIFS is probably trying to do something that's just timing out. Maybe DFS is the culprit. JCIFS DFS implementation isn't that smart. Try disabling DFS with the following:</div>
<div style><br></div><div style><div> jcifs.resolveOrder=DNS</div><div> jcifs.smb.client.dfs.disabled=true</div><div><br></div><div style>This is just a wild guess of course. I would need to see a proper capture to give you a definitive answer.</div>
</div><div style><br></div><div style>Mike</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, May 31, 2013 at 5:15 AM, Torsten Uhr <span dir="ltr"><<a href="mailto:torsten.uhr@sql-ag.de" target="_blank">torsten.uhr@sql-ag.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
our customer has discovered the IP addresses:<br>
<div class="im"><br>
>Which systems are respectively 193.30.60.233 and 172.30.40.62 ?<br>
<br>
</div>->172.30.40.62 is the SMB the client is connecting to.<br>
<br>
grztc001:/root # traceroute 172.30.40.62<br>
traceroute to 172.30.40.62 (172.30.40.62), 30 hops max, 40 byte packets using UDP<br>
1 <a href="http://vgmfas6a.customer.de" target="_blank">vgmfas6a.customer.de</a> (172.30.40.62) 2.192 ms 1.104 ms 0.302 ms<br>
<br>
grztc001:/root # ping 172.30.40.62<br>
PING 172.30.40.62 (172.30.40.62) 56(84) bytes of data.<br>
64 bytes from <a href="http://172.30.40.62" target="_blank">172.30.40.62</a>: icmp_seq=1 ttl=255 time=0.334 ms<br>
64 bytes from <a href="http://172.30.40.62" target="_blank">172.30.40.62</a>: icmp_seq=2 ttl=255 time=0.294 ms<br>
64 bytes from <a href="http://172.30.40.62" target="_blank">172.30.40.62</a>: icmp_seq=3 ttl=255 time=0.285 ms<br>
64 bytes from <a href="http://172.30.40.62" target="_blank">172.30.40.62</a>: icmp_seq=4 ttl=255 time=0.456 ms<br>
64 bytes from <a href="http://172.30.40.62" target="_blank">172.30.40.62</a>: icmp_seq=5 ttl=255 time=0.535 ms<br>
^C<br>
--- 172.30.40.62 ping statistics ---<br>
5 packets transmitted, 5 received, 0% packet loss, time 3996ms<br>
rtt min/avg/max/mdev = 0.285/0.380/0.535/0.101 ms<br>
<br>
<br>
> 193.30.60.233 is very suspicious!<br>
<br>
grztc001:/root # traceroute 193.30.60.233<br>
traceroute to 193.30.60.233 (193.30.60.233), 30 hops max, 40 byte packets using UDP<br>
1 <a href="http://v320-cat2.customer.de" target="_blank">v320-cat2.customer.de</a> (172.30.63.252) 0.314 ms 0.304 ms 0.273 ms<br>
2 * * *<br>
3 * * *<br>
4 * * *<br>
5 * * *<br>
6 * * *<br>
^C<br>
<br>
grztc001:/root # ping 193.30.60.233<br>
PING 193.30.60.233 (193.30.60.233) 56(84) bytes of data.<br>
^C<br>
--- 193.30.60.233 ping statistics ---<br>
53 packets transmitted, 0 received, 100% packet loss, time 52415ms<br>
<br>
<br>
nslookup resolved the name of the not responding server:<br>
<br>
Trying "233.60.30.193.in-addr.arpa"<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22794<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0<br>
<br>
;; QUESTION SECTION:<br>
;233.60.30.193.in-addr.arpa. IN PTR<br>
<br>
;; ANSWER SECTION:<br>
233.60.30.193.in-addr.arpa. 84414 IN PTR <a href="http://vgm.government.com" target="_blank">vgm.government.com</a>.<br>
<br>
Received 79 bytes from 193.30.53.10#53 in 5 ms<br>
<br>
The domain, the SMB user is authenticating to is 'VGM'. This is similar to the domain of the dead host. But this is only random!<br>
Why jcifs is contacting this host is inexplicable. This host is not configured in the client.<br>
<div class="im"><br>
<br>
>Can you run the same "netstat snapshots" while you are doing the same directory listing through the CIFS mountpoint ? (to compare)<br>
<br>
</div>grztc001:/TransConnect # smbclient //VGMVT01/VT-Logistik/ -U VGM/Transconnect<br>
Enter VGM/Transconnect's password:<br>
Domain=[VGM] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]<br>
smb: \> dir<br>
~snapshot DH 0 Fri May 31 00:00:26 2013<br>
....<br>
Dokumententitel.msg A 47616 Tue Apr 30 14:39:53 2013<br>
<br>
61440 blocks of size 524288. 36388 blocks available<br>
smb: \> exit<br>
<br>
<br>
This are the results of the netstat<br>
<br>
grztc001:/TransConnect # ./mytrace.sh<br>
2013/05/31 10:09:04 -<br>
2013/05/31 10:09:09 -<br>
2013/05/31 10:09:14 - tcp 0 0 <a href="http://172.30.36.1:59061" target="_blank">172.30.36.1:59061</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 20569/smbclient<br>
2013/05/31 10:09:19 - tcp 0 0 <a href="http://172.30.36.1:59061" target="_blank">172.30.36.1:59061</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 20569/smbclient<br>
2013/05/31 10:09:24 - tcp 0 0 <a href="http://172.30.36.1:59061" target="_blank">172.30.36.1:59061</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 20569/smbclient<br>
2013/05/31 10:09:29 - tcp 0 0 <a href="http://172.30.36.1:59061" target="_blank">172.30.36.1:59061</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 20569/smbclient<br>
2013/05/31 10:09:34 -<br>
2013/05/31 10:09:39 -<br>
<br>
<br>
For Your interest, I have attached the client.<br>
------------------------<br>
<div class="im"><br>
Torsten Uhr<br>
<br>
Email: <a href="mailto:torsten.uhr@sql-ag.de">torsten.uhr@sql-ag.de</a><br>
Web : <a href="http://www.transconnect-online.de" target="_blank">www.transconnect-online.de</a><br>
·······················································<br>
<br>
</div><div class="im">Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen.<br>
Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail oder Inhalte ist nicht gestattet.<br>
<br>
This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail.<br>
Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.<br>
<br>
SAVE PAPER - THINK BEFORE YOU PRINT<br>
<br>
<br>
-----Ursprüngliche Nachricht-----<br>
Von: <a href="mailto:jcifs-bounces@lists.samba.org">jcifs-bounces@lists.samba.org</a> [mailto:<a href="mailto:jcifs-bounces@lists.samba.org">jcifs-bounces@lists.samba.org</a>] Im Auftrag von André Warnier<br>
</div>Gesendet: Donnerstag, 30. Mai 2013 23:06<br>
<div class="im HOEnZb">An: JCIFS Samba list<br>
Betreff: Re: [jcifs] Performance Issue with jcifs and NetApp<br>
<br>
Torsten Uhr wrote:<br>
> Hi André,<br>
><br>
</div><div class="HOEnZb"><div class="h5">> here are the results oft he netstat command before, while listing the folder and after that.<br>
> It seems there are no unexpected connections.<br>
<br>
A real network trace would be much more informative, but something below "does not smell right".<br>
Which systems are respectively 193.30.60.233 and 172.30.40.62 ?<br>
(I assume that the Linux client is 172.30.36.1).<br>
It looks like a connection is attempted by 172.30.36.1 to <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a>, but<br>
193.30.60.233 never responds. (See <a href="http://en.wikipedia.org/wiki/TCP_half-open" target="_blank">http://en.wikipedia.org/wiki/TCP_half-open</a>).<br>
It seems related to your directory listing, since both connections appear only during the listing. Maybe that is what slows things down here.<br>
<br>
Can you run the same "netstat snapshots" while you are doing the same directory listing through the CIFS mountpoint ? (to compare)<br>
<br>
Apart from that, we cannot get much further without a real packet trace, using one of the programs which Charles mentioned. You have enough information below to filter the packets which you need to capture.<br>
<br>
Another way may be to provide a sample of the code which you use to do this directory listing. Maybe some java/cifs specialist here would spot some obvious mistake.<br>
Don't count on it too much though : not many people feel like browsing through someone else's code to spot mistakes, and it is quite time-consuming. Providing a packet trace would be much better.<br>
<br>
<br>
<br>
><br>
> BEFORE:<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
><br>
> WHILE:<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57740" target="_blank">172.30.36.1:57740</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> tcp 0 1 <a href="http://172.30.36.1:57742" target="_blank">172.30.36.1:57742</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> tcp 0 1 <a href="http://172.30.36.1:57743" target="_blank">172.30.36.1:57743</a> <a href="http://193.30.60.233:445" target="_blank">193.30.60.233:445</a> SYN_SENT 27162/java<br>
> tcp 0 0 <a href="http://172.30.36.1:57756" target="_blank">172.30.36.1:57756</a> <a href="http://172.30.40.62:445" target="_blank">172.30.40.62:445</a> VERBUNDEN 27162/java<br>
><br>
> AFTER:<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
> grztc001:/TransConnect # netstat -pn | grep -P ":(445|137|138|139)\s"<br>
><br>
> With best regards<br>
><br>
> Torsten Uhr<br>
> Leiter Entwicklung TransConnect®<br>
><br>
> Email: <a href="mailto:torsten.uhr@sql-ag.de">torsten.uhr@sql-ag.de</a><br>
> Web : <a href="http://www.transconnect-online.de" target="_blank">www.transconnect-online.de</a><br>
> ·······················································<br>
> SQL Projekt AG<br>
> Franklinstr. 25 a<br>
> 01069 Dresden<br>
><br>
> Aufsichtsratsvorsitzender: Franz-Josef Günther<br>
> Vorstand: Jürgen Bittner (Vorsitzender), André Engelhorn, Jens Gärtner<br>
> Handelsregister: HRB 28128 Amtsgericht Dresden<br>
><br>
> Telefon: (0351) 87619-0<br>
> Telefax: (0351) 87619-99<br>
> <a href="http://www.sql-ag.de" target="_blank">http://www.sql-ag.de</a><br>
> ·······················································<br>
><br>
> Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen.<br>
> Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail oder Inhalte ist nicht gestattet.<br>
><br>
> This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail.<br>
> Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.<br>
><br>
> ü SAVE PAPER - THINK BEFORE YOU PRINT<br>
><br>
><br>
> -----Ursprüngliche Nachricht-----<br>
> Von: <a href="mailto:jcifs-bounces@lists.samba.org">jcifs-bounces@lists.samba.org</a><br>
> [mailto:<a href="mailto:jcifs-bounces@lists.samba.org">jcifs-bounces@lists.samba.org</a>] Im Auftrag von André Warnier<br>
> Gesendet: Mittwoch, 29. Mai 2013 17:00<br>
> An: JCIFS Samba list<br>
> Betreff: Re: [jcifs] Performance Issue with jcifs and NetApp<br>
><br>
> Torsten Uhr wrote:<br>
>> Hi André,<br>
>><br>
>> thanks for Your quick reply.<br>
>><br>
>>> Is that what happens ?<br>
>> Exactly.<br>
>><br>
>>> "NetApp fileserver" (whatever that is),<br>
>> see: <a href="http://www.netapp.com/de/products/protocols/nas/cifs.aspx" target="_blank">http://www.netapp.com/de/products/protocols/nas/cifs.aspx</a><br>
>><br>
>>> do you have any way, on the NetApp server, to trace what is going on and see what the difference is when accessing these files from the one or the other type of client ?<br>
>> I have pleased our customer to contact their operations to check out for any logs. At the moment their are only connection information but no logs.<br>
>><br>
>>> Or alternatively, on the client system, to trace what is going on between that client and that NetApp server ?<br>
>> I have told our customer to set the property 'jcifs.util.loglevel=10'. Are there any other tasks to enable logging in jcifs?<br>
>> If i receive any further information, I will send it to You.<br>
><br>
> Send it to the list, like before. I am not really an expert here, I was just trying to define the issue clearly.<br>
><br>
> If the mounting of the CIFS filesystem works, and the access through that mountpoint is fast, that seems to eliminate any fundamental issue like network problems, or DNS problems, or authentication problems.<br>
><br>
> So there must be something quite specific that slows down things when you access the files through the jcifs library. Which on the face of it looks a bit strange, because as far as I know the CIFS filesystem implementation under Linux is using much of the same codebase from <a href="http://samba.org" target="_blank">samba.org</a>.<br>
> In that area, I am a bit over my head unfortunately.<br>
><br>
> I would float a suspicion, but do not by any means consider this as a well-informed comment : maybe the way in which you are doing the access through the jcifs library is forcing it to create new connections all the time, resulting in a new authentication at each access ? That would probably slow down things quite a bit.<br>
><br>
> The right tool to find out would be something like Wireshark, and get a network trace while you are reading a file (slowly) through the jcifs library.<br>
> But you could just start such a (long) transfer, and then do a "netstat" on your Linux client. That should show at least the socket connections in use for that transfer.<br>
> You are looking for port numbers :137, :138, :139 and :445.<br>
> For example :<br>
> netstat -pn | grep -P ":(445|137|138|139)\s"<br>
><br>
><br>
><br>
<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Michael B Allen<br>Java Active Directory Integration<br><a href="http://www.ioplex.com/">http://www.ioplex.com/</a>
</div>