IPC$ (2nd try)

Samar Sharma ssharma at cisco.com
Sat Nov 25 23:35:34 GMT 2000


Trying again.....

Could someone please help

Thanks.

-S
At 05:50 AM 11/23/00 +0000, Govinda Sharma wrote:

>Gerald,
>
>> >
>> > I am using a sniffer to observe the SMB packets.
>> >
>> > I find that windows client makes multiple TREE_CONNECTS
>> > to the IPC$ share prior to an actual TREE_CONNECT to
>> > the mapped share and also prior to opening a file.
>> > Does anyone know what do these TREE_CONNECTS to the IPC$
>> > share achieve ?
>>
>>The IPC$ share is a built in share for an SMB server which
>>clients can connect to in order to perform session level
>>validation.  This then allows other remote administration
>>commands (including the ability to support named pipes
>>over IPC$).
>
>But then why does the client do multiple TREE_CONNECT to the IPC$ share on 
>the server ? It does these after the SESSION_SETUP is over.
>
>Specifically, I observe the following on the sniffer (after NEGOTIATE
>and SETUP have been done):
>
>[1] multiple TREE_CONNECT requests to the IPC$
>[2] TREE_CONNECT request to the [test] share (e: on client is
>    being mapped to [test] on the server)
>[3] multiple TREE_CONNECT requests to the IPC$
>[4] OPEN_FILE
>[5] CLOSE_FILE
>
>I don't understand why the client is doing steps [1] and [3].
>
>Thanks.
>
>-S
>
>>
>> > Furthermore, Samba returns a DIFFERENT Tid for each TREE_CONNECT
>> > request to the IPC$ share. Is that required by the client ?
>>
>>the Tree connection ID for each resouce connection should be
>>an ID used on a per session basis.
>>
>>
>>
>>
>>
>>Cheers, jerry
>>----------------------------------------------------------------------
>>    /\  Gerald (Jerry) Carter                     Professional Services
>>  \/    http://www.valinux.com/  VA Linux Systems   gcarter at valinux.com
>>        http://www.samba.org/       SAMBA Team          jerry at samba.org
>>        http://www.plainjoe.org/                     jerry at plainjoe.org
>>
>>        "...a hundred billion castaways looking for a home."
>>                                 - Sting "Message in a Bottle" ( 1979 )
>
>_____________________________________________________________________________________
>Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com





More information about the samba-technical mailing list