[jcifs] jcifs and packet monitoring

[Mohan Radhakrishnan]

Hi,
    I came across this link http://support.microsoft.com/kb/300549 about
security auditing to trace CIFS failures.

What type of Windows Packet monitors are recommended to trace 'Access
denied' errors ? These errors appear and vanish frequently seemingly
without any reason.

We used to think that the login into the domain controller is being
rejected due to load and then accepted.

I am aware of the debug option and wireshark but this is our prod.
Systems. So we don't want to use it.

Thanks,
Mohan