SMBtdis
Scott Moomaw
scott at bridgewater.edu
Wed Sep 5 18:49:26 GMT 2001
It's me again :-)
I'm seeing circumstances where connections seem to be opened and closed
rather randomly for various shares using cvs of 010831 on Solaris 2.8.
I'm concerned that this may be related to other problems that we're having
(including performance problems). The logs are cluttered with lines like
under normal use.
[2001/09/05 09:23:41, 1, pid=29495] smbd/service.c:make_connection(610)
programmer (147.138.20.20) connect to service self_study as user btyler (uid=1047, gid=14) (pid 29495)
[2001/09/05 09:24:32, 1, pid=29495] smbd/service.c:close_cnum(650)
programmer (147.138.20.20) closed connection to service orgs
I turned up debugging on a connection and captured packets with snoop to
gather more info. The snoop shows the client perform a SMBtrans2 call of
QueryFileInfo after which the server does a disconnect, first from IPC$
and then from the btyler share.
13159 0.08216 Terra.bridgewater.edu -> Programmer.bridgewater.edu SMB R
Code=0xa2 Name=SMB NT_CreateX FileID=0x16ad Error=0
13160 0.00080 Programmer.bridgewater.edu -> Terra.bridgewater.edu SMB C Code=0
x32 Name=SMBtrans2 QueryFileInfo FileID=0x16ad Error=0
13161 0.05262 Terra.bridgewater.edu -> Programmer.bridgewater.edu SMB R
Code=0x71 Name=SMBtdis Error=0
13162 0.18554 Programmer.bridgewater.edu -> Terra.bridgewater.edu NBT C
port=1038
13163 0.00145 Terra.bridgewater.edu -> Programmer.bridgewater.edu SMB R
Code=0x71 Name=SMBtdis Error=0
13164 0.08789 Terra.bridgewater.edu -> Programmer.bridgewater.edu SMB R
Code=0x32 Name=SMBtrans2 Error=0
13165 0.00059 Programmer.bridgewater.edu -> Terra.bridgewater.edu NBT C
port=1038
Under what circumstances is a SMBtdis normal? I'm including a section of
the samba log file for review. The SMBtdis responses are near the end.
[2001/09/05 12:22:46, 5, pid=29495]
smbd/nttrans.c:reply_ntcreate_and_X(957)
reply_ntcreate_and_X: fnum = 5805, open name =
eudora/EudPriv/Ads/208978554.mf
s
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(293)
size=103
smb_com=0xa2
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=1
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(299)
smb_tid=3
smb_pid=1168
smb_uid=101
smb_mid=4617
smt_wct=34
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[0]=255 (0xFF)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[1]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[2]=44288 (0xAD00)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[3]=278 (0x116)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[4]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[5]=32768 (0x8000)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[6]=15625 (0x3D09)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[7]=9664 (0x25C0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[8]=49462 (0xC136)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[9]=32769 (0x8001)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[10]=21963 (0x55CB)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[11]=9981 (0x26FD)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[12]=49462 (0xC136)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[13]=32769 (0x8001)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[14]=15625 (0x3D09)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[15]=9664 (0x25C0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[16]=49462 (0xC136)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[17]=32769 (0x8001)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[18]=15625 (0x3D09)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[19]=9664 (0x25C0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[20]=49462 (0xC136)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[21]=8193 (0x2001)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[22]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[23]=1024 (0x400)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[24]=56 (0x38)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[25]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[26]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[27]=1024 (0x400)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[28]=56 (0x38)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[29]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[30]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[31]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[32]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(304)
smb_vwv[33]=0 (0x0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(309)
smb_bcc=0
[2001/09/05 12:22:46, 6, pid=29495] lib/util_sock.c:write_socket(560)
write_socket(12,107)
[2001/09/05 12:22:46, 6, pid=29495] lib/util_sock.c:write_socket(563)
write_socket(12,107) wrote 107
[2001/09/05 12:22:46, 10, pid=29495]
lib/util_sock.c:read_smb_length_return_keep
alive(602)
got smb length of 35
[2001/09/05 12:22:46, 6, pid=29495] smbd/process.c:process_smb(836)
got message type 0x0 of len 0x23
[2001/09/05 12:22:46, 3, pid=29495] smbd/process.c:process_smb(837)
Transaction 52895 of length 39
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(293)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=2055
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(299)
smb_tid=1
smb_pid=65279
smb_uid=116
smb_mid=4680
smt_wct=0
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(309)
smb_bcc=0
[2001/09/05 12:22:46, 3, pid=29495] smbd/process.c:switch_message(650)
switch message SMBtdis (pid 29495)
[2001/09/05 12:22:46, 3, pid=29495] smbd/sec_ctx.c:set_sec_ctx(317)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2001/09/05 12:22:46, 5, pid=29495] smbd/uid.c:unbecome_user(216)
unbecome_user now uid=(0,0) gid=(0,0)
[2001/09/05 12:22:46, 3, pid=29495] smbd/sec_ctx.c:set_sec_ctx(317)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2001/09/05 12:22:46, 5, pid=29495] smbd/uid.c:unbecome_user(216)
unbecome_user now uid=(0,0) gid=(0,0)
[2001/09/05 12:22:46, 3, pid=29495] smbd/service.c:close_cnum(650)
programmer (147.138.20.20) closed connection to service IPC$
[2001/09/05 12:22:46, 3, pid=29495] smbd/connection.c:yield_connection(50)
Yielding connection to IPC$
[2001/09/05 12:22:46, 3, pid=29495] smbd/sec_ctx.c:set_sec_ctx(317)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2001/09/05 12:22:46, 5, pid=29495] smbd/uid.c:unbecome_user(216)
unbecome_user now uid=(0,0) gid=(0,0)
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(293)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=1
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(299)
smb_tid=1
smb_pid=65279
smb_uid=116
smb_mid=4680
smt_wct=0
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(309)
smb_bcc=0
[2001/09/05 12:22:46, 6, pid=29495] lib/util_sock.c:write_socket(560)
write_socket(12,39)
[2001/09/05 12:22:46, 6, pid=29495] lib/util_sock.c:write_socket(563)
write_socket(12,39) wrote 39
[2001/09/05 12:22:46, 10, pid=29495]
lib/util_sock.c:read_smb_length_return_keep
alive(602)
got smb length of 35
[2001/09/05 12:22:46, 6, pid=29495] smbd/process.c:process_smb(836)
got message type 0x0 of len 0x23
[2001/09/05 12:22:46, 3, pid=29495] smbd/process.c:process_smb(837)
Transaction 52896 of length 39
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(293)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=2055
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(299)
smb_tid=6
smb_pid=65279
smb_uid=101
smb_mid=4741
smt_wct=0
[2001/09/05 12:22:46, 5, pid=29495] lib/util.c:show_msg(309)
smb_bcc=0
[2001/09/05 12:22:46, 3, pid=29495] smbd/process.c:switch_message(650)
switch message SMBtdis (pid 29495)
[2001/09/05 12:22:46, 3, pid=29495] smbd/sec_ctx.c:set_sec_ctx(317)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2001/09/05 12:22:46, 5, pid=29495] smbd/uid.c:unbecome_user(216)
unbecome_user now uid=(0,0) gid=(0,0)
[2001/09/05 12:22:46, 3, pid=29495] smbd/sec_ctx.c:set_sec_ctx(317)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2001/09/05 12:22:46, 5, pid=29495] smbd/uid.c:unbecome_user(216)
unbecome_user now uid=(0,0) gid=(0,0)
[2001/09/05 12:22:46, 1, pid=29495] smbd/service.c:close_cnum(650)
programmer (147.138.20.20) closed connection to service btyler
[2001/09/05 12:22:46, 3, pid=29495] smbd/connection.c:yield_connection(50)
Yielding connection to btyler
[2001/09/05 12:22:46, 3, pid=29495] smbd/sec_ctx.c:set_sec_ctx(317)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2001/09/05 12:22:46, 5, pid=29495] smbd/uid.c:unbecome_user(216)
unbecome_user now uid=(0,0) gid=(0,0)
------------------------------------------------------------------------
Scott Moomaw, Network Administrator Scott at Bridgewater.edu
Bridgewater College, IT Center
Bridgewater, VA 22812
Phone (540) 828 - 8000 x5437 FAX: (540) 828 - 5493
More information about the samba-technical
mailing list