[cifs-protocol] 119030519730578 server response for oversized alternate data streams

[Edgar Olougouna]

Thanks Björn, I will take a look and get back to you. 
Edgar 

-----Original Message-----
From: Björn JACKE <bj at SerNet.DE> 
Sent: Tuesday, March 5, 2019 3:49 PM
To: Edgar Olougouna <edgaro at microsoft.com>
Cc: cifs-protocol at lists.samba.org; MSSolve Case Email <casemail at microsoft.com>
Subject: Re: 119030519730578 server response for oversized alternate data streams

Hello Edgar,

On 2019-03-05 at 20:24 +0000 Edgar Olougouna sent off:
> Can you please share some network captures (e.g. .cap traces ) of your test cases? 
> I will investigate this and follow-up.

thanks for your answer, attached there are 2 captures of a current Windows 10 client (explorer.exe) copying a file test.txt with a ~400kb ADS "mystream" in it onto a 2012R2 server.

refs-sniff-packet-487.pcap.gz:
In this capture the share is a ReFS (128k sized ADS supported) volume, see packet 487 ff.

vfat-sniff-packet-147.pcap.gz:
In this capture the share is a vfat volume with no ADS support, see packet 147 ff.

There are also the screenshots of the dialogues the Windows 10 client shows when the ADS writes fails for both cases.

Thank you!
Björn
--
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: 0551-370000-0, mail: kontakt at sernet.de
Gesch.F.: Dr. Johannes Loxen & Reinhild Jung AG Göttingen: HR-B 2816 - https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.sernet.de&data=02%7C01%7Cedgaro%40microsoft.com%7C38514d342a8d4073590c08d6a1b4580e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C1%7C636874193466020595&sdata=GIVEvFxHvqwTd%2BXvtSjmpBKPfk9Px2SbfsCOTLkn6ik%3D&reserved=0

Samba eXPerience 2019, Hotel Freizeit In sponsored by Google, Microsoft & Red Hat June, 4th - 6th 2019, https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2FsambaXP.org&data=02%7C01%7Cedgaro%40microsoft.com%7C38514d342a8d4073590c08d6a1b4580e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C1%7C636874193466020595&sdata=WaCKgTPFKVbKLRddYFRPkwZZzclnFPhVhksKMqcT0%2Fk%3D&reserved=0