[cifs-protocol] 119030519730578 server response for oversized alternate data streams

[Björn JACKE]

Hello Edgar,

On 2019-03-05 at 20:24 +0000 Edgar Olougouna sent off:
> Can you please share some network captures (e.g. .cap traces ) of your test cases? 
> I will investigate this and follow-up.

thanks for your answer, attached there are 2 captures of a current Windows 10
client (explorer.exe) copying a file test.txt with a ~400kb ADS "mystream" in it
onto a 2012R2 server.

refs-sniff-packet-487.pcap.gz:
In this capture the share is a ReFS (128k sized ADS supported) volume, see packet 487 ff.

vfat-sniff-packet-147.pcap.gz:
In this capture the share is a vfat volume with no ADS support, see packet 147 ff.

There are also the screenshots of the dialogues the Windows 10 client shows
when the ADS writes fails for both cases.

Thank you!
Björn
-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: 0551-370000-0, mail: kontakt at sernet.de
Gesch.F.: Dr. Johannes Loxen & Reinhild Jung
AG Göttingen: HR-B 2816 - https://www.sernet.de

Samba eXPerience 2019, Hotel Freizeit In
sponsored by Google, Microsoft & Red Hat
June, 4th - 6th 2019, http://sambaXP.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: refs-sniff-packet-487.pcap.gz
Type: application/gzip
Size: 26411 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20190305/57917b2d/refs-sniff-packet-487.pcap-0001.gz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vfat-sniff-packet-147.pcap.gz
Type: application/gzip
Size: 10158 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20190305/57917b2d/vfat-sniff-packet-147.pcap-0001.gz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: refs-too-big-data-stream.png
Type: image/png
Size: 26045 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20190305/57917b2d/refs-too-big-data-stream-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vfat-unsupported-data-stream.png
Type: image/png
Size: 15660 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20190305/57917b2d/vfat-unsupported-data-stream-0001.png>