[Samba] Long Delays Displaying Small Folders in Windows Explorer
(samba-3.0.10-1 FC2)
Stewart Baillie
stewart.baillie at nghealth.com
Mon May 30 07:47:46 GMT 2005
Hi,
I'm trying to replace a windows fileserver server with a Fedora Core 2
samba server in our Windows 2000 ADS domain.
A performance problem occurs when accessing certain samba shares from
Windows Explorer on either an Windows XP or a W2K client machine. It
can take up to a minute for explorer to list files in a share folder
containing only a few files! It eventually does, but but reports as non
responding for a long period beforehand.
I've gone about as far as I can in attempting to resolve this issue
myserlf and would appreciate any suggestions from the samba list!
Server Hardware:
HP Proliant ML 350 Xeon 1G mem
NetXtreme BCM5705_2 Gigabit Ethernet
Server Software
All FC2 packages updates applied as of early May 2005 including:
smp kernel 2.6.10-1.771
samba 3.0.10
Network Hardware
Linksys and 3com Switches (circa 2004)
Client hardware:
Windows 2000 SP4 and Windows XP Pro machines
In setting up the samba server, I followed the approach outlined in
"Samba-3 By Example" chapter 9.3.3 "Active Directory Domain with samba
Domain Member Server". I also applied recommended tuning steps. The
setup all seemed to go impressively smoothly.
I suspect the problem is related to networking. Analysis in ethereal
shows a huge amount of traffic during the non responsive period. It
looks like every file is read in it's entirity in 512 byte increments?
Also, a lot of checksum messages come up.
Two highly abreviated text extracts from the ethereal logs are attached
(which are repeatable):
The first shows the (61 entries) activity involved in displaying
share //nghfs/downloads - which occurs quickly.
The second shows a sample of the excessive activity (57000 log entries!)
involved in displaying a sub folder share //nghfs/downloads/Mozilla -
which takes quite a few seconds although only contains 5 files and 2
folders.
The smb.conf file is also attached.
Any help is most welcome,
Stewart.
-------------- next part --------------
#Global parameters
[global]
unix charset = LOCALE
workgroup = NGHEALTH
realm = NGHEALTH.ORG
server string = NGHFS Samba
security = ADS
username map = /etc/samba/smbusers
log level = 3
syslog = 1
log file = /var/log/samba/%m
max log size = 50
printcap name = CUPS
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
template primary group = "Domain Users"
template shell = /bin/bash
winbind separator = +
printing = cups
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dead time = 10
getwd cache = yes
oplocks = no
level2 oplocks = no
#[homes]
# comment = Home Directories
# valid users = %S
# read only = No
# browseable = No
[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
admin users = root NGHEALTH+Administrator @"NGHEALTH+Domain Admins"
write list = root
[ghost]
comment = Ghost Image Store
path = /mnt/images/images
admin users = root NGHEALTH+Administrator @"NGHEALTH+Domain Admins"
valid users = @"NGHEALTH+Domain Admins"
browseable = Yes
writable = Yes
oplocks = false
level2 oplocks = false
[software]
comment = Licensed Software [Restricted]
path = /home/software
admin users = root NGHEALTH+Administrator @"NGHEALTH+Domain Admins"
valid users = @"NGHEALTH+Domain Admins"
available = Yes
browseable = Yes
writable = Yes
create mask = 775
inherit permissions = yes
oplocks = false
level2 oplocks = false
[downloads]
comment = Downloads Directory [Public]
path = /home/downloads
admin users = root NGHEALTH+Administrator @"NGHEALTH+Web Admins"
valid users = @"NGHEALTH+Domain Users"
available = Yes
browseable = Yes
writable = Yes
create mask = 775
inherit permissions = yes
oplocks = false
level2 oplocks = false
[users]
comment = Offline users store
path = /home/users
admin users = root NGHEALTH+Administrator @"NGHEALTH+Web Admins"
valid users = @"NGHEALTH+Domain Users"
available = Yes
browseable = Yes
writable = No
oplocks = false
level2 oplocks = false
-------------- next part --------------
Open //NGHFS/downloads mapped drive share in Windows Exporer
************************************************************
No. Time Source Destination Protocol Info
55 157.836971 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \Desktop.ini
No. Time Source Destination Protocol Info
56 157.841124 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
57 157.841559 192.168.4.210 192.168.4.230 SMB NT Create AndX Request, Path: \Desktop.ini
No. Time Source Destination Protocol Info
58 157.842121 192.168.4.230 192.168.4.210 SMB NT Create AndX Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
59 157.843406 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \Desktop.ini
No. Time Source Destination Protocol Info
60 157.843835 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
61 157.847354 192.168.4.210 192.168.4.230 SMB NT Create AndX Request, Path: \Desktop.ini
No. Time Source Destination Protocol Info
62 157.847918 192.168.4.230 192.168.4.210 SMB NT Create AndX Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
63 157.881653 192.168.4.210 192.168.4.230 SMB Session Setup AndX Request
No. Time Source Destination Protocol Info
64 157.921514 192.168.4.230 192.168.4.210 TCP microsoft-ds > 2791 [ACK] Seq=1507 Ack=6694 Win=10220 Len=0
No. Time Source Destination Protocol Info
65 157.989854 192.168.4.230 192.168.4.210 SMB Session Setup AndX Response
No. Time Source Destination Protocol Info
66 157.990460 192.168.4.210 192.168.4.230 SMB Tree Connect AndX Request, Path: \\NGHFS\IPC$
No. Time Source Destination Protocol Info
67 157.990495 192.168.4.230 192.168.4.210 TCP microsoft-ds > 2791 [ACK] Seq=1773 Ack=6774 Win=10220 Len=0
68 157.991434 192.168.4.230 192.168.4.210 SMB Tree Connect AndX Response
No. Time Source Destination Protocol Info
69 157.992018 192.168.4.210 192.168.4.230 SMB Logoff AndX Request
No. Time Source Destination Protocol Info
70 157.992202 192.168.4.230 192.168.4.210 SMB Logoff AndX Response
No. Time Source Destination Protocol Info
71 157.992382 192.168.4.210 192.168.4.230 SMB Tree Disconnect Request
No. Time Source Destination Protocol Info
72 157.992626 192.168.4.230 192.168.4.210 SMB Tree Disconnect Response
No. Time Source Destination Protocol Info
73 157.993129 192.168.4.210 192.168.4.230 SMB Tree Connect AndX Request, Path: \\NGHFS\SOFTWARE
No. Time Source Destination Protocol Info
74 157.995432 192.168.4.230 192.168.4.210 SMB Tree Connect AndX Response
No. Time Source Destination Protocol Info
75 158.017496 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \Desktop.ini
No. Time Source Destination Protocol Info
76 158.017925 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
77 158.018329 192.168.4.210 192.168.4.230 SMB NT Create AndX Request, Path: \Desktop.ini
No. Time Source Destination Protocol Info
78 158.018712 192.168.4.230 192.168.4.210 SMB NT Create AndX Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
79 158.019295 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \Desktop.ini
No. Time Source Destination Protocol Info
80 158.019624 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
81 158.019943 192.168.4.210 192.168.4.230 SMB NT Create AndX Request, Path: \Desktop.ini
No. Time Source Destination Protocol Info
82 158.020301 192.168.4.230 192.168.4.210 SMB NT Create AndX Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
No. Time Source Destination Protocol Info
83 158.023038 192.168.4.210 192.168.4.230 SMB Session Setup AndX Request
No. Time Source Destination Protocol Info
84 158.062488 192.168.4.230 192.168.4.210 TCP microsoft-ds > 2791 [ACK] Seq=2121 Ack=8702 Win=10220 Len=0
No. Time Source Destination Protocol Info
85 158.128004 192.168.4.230 192.168.4.210 SMB Session Setup AndX Response
No. Time Source Destination Protocol Info
86 158.128675 192.168.4.210 192.168.4.230 SMB Tree Connect AndX Request, Path: \\NGHFS\IPC$
No. Time Source Destination Protocol Info
87 158.128739 192.168.4.230 192.168.4.210 TCP microsoft-ds > 2791 [ACK] Seq=2387 Ack=8782 Win=10220 Len=0
No. Time Source Destination Protocol Info
88 158.129681 192.168.4.230 192.168.4.210 SMB Tree Connect AndX Response
No. Time Source Destination Protocol Info
89 158.130117 192.168.4.210 192.168.4.230 SMB Logoff AndX Request
No. Time Source Destination Protocol Info
90 158.130291 192.168.4.230 192.168.4.210 SMB Logoff AndX Response
No. Time Source Destination Protocol Info
91 158.130510 192.168.4.210 192.168.4.230 SMB Tree Disconnect Request
No. Time Source Destination Protocol Info
92 158.130776 192.168.4.230 192.168.4.210 SMB Tree Disconnect Response
No. Time Source Destination Protocol Info
93 158.131235 192.168.4.210 192.168.4.230 SMB Tree Connect AndX Request, Path: \\NGHFS\DOWNLOADS
No. Time Source Destination Protocol Info
94 158.133481 192.168.4.230 192.168.4.210 SMB Tree Connect AndX Response
No. Time Source Destination Protocol Info
95 158.206248 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_FS_INFO, Query Full FS Size Info
No. Time Source Destination Protocol Info
96 158.207309 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_FS_INFO
No. Time Source Destination Protocol Info
97 158.209775 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_FS_INFO, Query Full FS Size Info
No. Time Source Destination Protocol Info
98 158.210698 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_FS_INFO
No. Time Source Destination Protocol Info
99 158.218917 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_FS_INFO, Query Full FS Size Info
No. Time Source Destination Protocol Info
100 158.219695 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_FS_INFO
No. Time Source Destination Protocol Info
101 158.220407 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_FS_INFO, Query Full FS Size Info
No. Time Source Destination Protocol Info
102 158.221167 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_FS_INFO
No. Time Source Destination Protocol Info
103 158.394991 192.168.4.210 192.168.4.230 TCP 2791 > microsoft-ds [ACK] Seq=9250 Ack=2947 Win=65535 Len=0
-------------- next part --------------
No. Time Source Destination Protocol Info
167 289.530921 192.168.4.210 192.168.4.230 TCP 2791 > microsoft-ds [ACK] Seq=11755 Ack=9902 Win=64907 Len=0
No. Time Source Destination Protocol Info
168 315.608280 192.168.4.210 192.168.4.230 SMB Trans2 Request, FIND_FIRST2, Pattern: Mozilla
No. Time Source Destination Protocol Info
169 315.608775 192.168.4.230 192.168.4.210 SMB Trans2 Response, FIND_FIRST2, Files: Mozilla
No. Time Source Destination Protocol Info
170 315.609321 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \Mozilla
No. Time Source Destination Protocol Info
171 315.609513 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_PATH_INFO
No. Time Source Destination Protocol Info
172 315.610172 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_PATH_INFO, Query File Standard Info, Path: \Mozilla
No. Time Source Destination Protocol Info
173 315.610352 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_PATH_INFO
No. Time Source Destination Protocol Info
174 315.610665 192.168.4.210 192.168.4.230 SMB NT Create AndX Request, Path: \Mozilla
No. Time Source Destination Protocol Info
175 315.610912 192.168.4.230 192.168.4.210 SMB NT Create AndX Response, FID: 0x169e
No. Time Source Destination Protocol Info
176 315.611072 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x169e, Query File Stream Info
No. Time Source Destination Protocol Info
177 315.611243 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_FILE_INFO
No. Time Source Destination Protocol Info
178 315.611532 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x169e, Query File Basic Info
No. Time Source Destination Protocol Info
179 315.611701 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_FILE_INFO
No. Time Source Destination Protocol Info
180 315.612056 192.168.4.210 192.168.4.230 SMB Close Request, FID: 0x169e
No. Time Source Destination Protocol Info
181 315.612202 192.168.4.230 192.168.4.210 SMB Close Response
No. Time Source Destination Protocol Info
182 315.612743 192.168.4.210 192.168.4.230 SMB Trans2 Request, FIND_FIRST2, Pattern: Mozilla
No. Time Source Destination Protocol Info
183 315.613098 192.168.4.230 192.168.4.210 SMB Trans2 Response, FIND_FIRST2, Files: Mozilla
No. Time Source Destination Protocol Info
184 315.768371 192.168.4.210 192.168.4.230 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
No. Time Source Destination Protocol Info
185 315.771026 192.168.4.230 192.168.4.210 SMB Trans2 Response, QUERY_PATH_INFO
No. Time Source Destination Protocol Info
186 315.782248 192.168.4.210 192.168.4.230 SMB Trans2 Request, FIND_FIRST2, Pattern: \Mozilla\*
No. Time Source Destination Protocol Info
187 315.783172 192.168.4.230 192.168.4.210 SMB Trans2 Response, FIND_FIRST2, Files: . .. extensions - firefox Sunbird-0.2rc2-win32 user.js Thunderbird Setup 1.0.exe mozilla-win32-1.7.5-installer.exe Firefox Setup 1.0.3.exe Firefox Setup 1.0.4.exe
No. Time Source Destination Protocol Info
188 315.867802 192.168.4.210 192.168.4.230 SMB NT Create AndX Request, Path: \Mozilla
.......................................................................................................................
No. Time Source Destination Protocol Info
221 315.933998 192.168.4.210 192.168.4.230 SMB Read AndX Request, FID: 0x16a0, 256 bytes at offset 0
No. Time Source Destination Protocol Info
222 315.942490 192.168.4.230 192.168.4.210 SMB Read AndX Response, FID: 0x16a0, 256 bytes
No. Time Source Destination Protocol Info
223 315.942744 192.168.4.210 192.168.4.230 SMB Read AndX Request, FID: 0x16a0, 256 bytes at offset 64
No. Time Source Destination Protocol Info
224 315.942916 192.168.4.230 192.168.4.210 SMB Read AndX Response, FID: 0x16a0, 256 bytes
.......................................................................................................................
No. Time Source Destination Protocol Info
1331 316.312070 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 276992
Frame 1331 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49443, Ack: 310553, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1332 316.312235 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1332 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 310553, Ack: 49506, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1333 316.312537 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 277504
Frame 1333 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49506, Ack: 311128, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1334 316.312723 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1334 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 311128, Ack: 49569, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1335 316.312879 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 278016
Frame 1335 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49569, Ack: 311703, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1336 316.313034 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1336 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 311703, Ack: 49632, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1337 316.313360 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 278528
Frame 1337 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49632, Ack: 312278, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1338 316.313507 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1338 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 312278, Ack: 49695, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1339 316.314145 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 279040
Frame 1339 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49695, Ack: 312853, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1340 316.314292 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1340 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 312853, Ack: 49758, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1341 316.314578 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 279552
Frame 1341 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49758, Ack: 313428, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1342 316.314729 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1342 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 313428, Ack: 49821, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1343 316.315066 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 280064
Frame 1343 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49821, Ack: 314003, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1344 316.315213 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1344 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 314003, Ack: 49884, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1345 316.315723 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 280576
Frame 1345 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49884, Ack: 314578, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1346 316.315874 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1346 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 314578, Ack: 49947, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1347 316.316206 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 281088
Frame 1347 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 49947, Ack: 315153, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1348 316.316353 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1348 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 315153, Ack: 50010, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1349 316.316771 192.168.4.210 192.168.4.230 SMB Read
AndX Request, FID: 0x16a0, 512 bytes at offset 281600
Frame 1349 (117 bytes on wire, 117 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr:
192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds
(445), Seq: 50010, Ack: 315728, Len: 63
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
1350 316.316918 192.168.4.230 192.168.4.210 SMB Read
AndX Response, FID: 0x16a0, 512 bytes
Frame 1350 (629 bytes on wire, 629 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr:
192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791
(2791), Seq: 315728, Ack: 50073, Len: 575
NetBIOS Session Service
SMB (Server Message Block Protocol)
.......................................................................................................................
No. Time Source Destination Protocol Info
28309 324.630736 192.168.4.210 192.168.4.230 TCP 2791 > microsoft-ds [ACK] Seq=772007 Ack=11933532 Win=65535 Len=0
Frame 28309 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr: 192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds (445), Seq: 772007, Ack: 11933532, Len: 0
No. Time Source Destination Protocol Info
28310 324.630755 192.168.4.230 192.168.4.210 TCP [Continuation to #28279] microsoft-ds > 2791 [ACK] Seq=11936452 Ack=772007 Win=10220 [CHECKSUM INCORRECT] Len=1460
Frame 28310 (1514 bytes on wire, 1514 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 11936452, Ack: 772007, Len: 1460
No. Time Source Destination Protocol Info
28311 324.630765 192.168.4.230 192.168.4.210 TCP [Continuation to #28279] microsoft-ds > 2791 [ACK] Seq=11937912 Ack=772007 Win=10220 [CHECKSUM INCORRECT] Len=1460
Frame 28311 (1514 bytes on wire, 1514 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 11937912, Ack: 772007, Len: 1460
.......................................................................................................................
No. Time Source Destination Protocol Info
57943 336.272896 192.168.4.210 192.168.4.230 TCP 2791 > microsoft-ds [ACK] Seq=1429976 Ack=28614574 Win=65535 Len=0
Frame 57943 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr: 192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds (445), Seq: 1429976, Ack: 28614574, Len: 0
No. Time Source Destination Protocol Info
57944 336.272903 192.168.4.230 192.168.4.210 TCP [Continuation to #57924] microsoft-ds > 2791 [ACK] Seq=28614574 Ack=1429976 Win=18980 [CHECKSUM INCORRECT] Len=1460
Frame 57944 (1514 bytes on wire, 1514 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 28614574, Ack: 1429976, Len: 1460
No. Time Source Destination Protocol Info
57945 336.272910 192.168.4.230 192.168.4.210 TCP [Continuation to #57924] microsoft-ds > 2791 [ACK] Seq=28616034 Ack=1429976 Win=18980 [CHECKSUM INCORRECT] Len=1460
Frame 57945 (1514 bytes on wire, 1514 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 28616034, Ack: 1429976, Len: 1460
No. Time Source Destination Protocol Info
57946 336.272920 192.168.4.230 192.168.4.210 TCP [Continuation to #57924] microsoft-ds > 2791 [PSH, ACK] Seq=28617494 Ack=1429976 Win=18980 [CHECKSUM INCORRECT] Len=1460
Frame 57946 (1514 bytes on wire, 1514 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 28617494, Ack: 1429976, Len: 1460
No. Time Source Destination Protocol Info
57947 336.272938 192.168.4.230 192.168.4.210 TCP [Continuation to #57924] microsoft-ds > 2791 [ACK] Seq=28618954 Ack=1429976 Win=18980 [CHECKSUM INCORRECT] Len=1460
Frame 57947 (1514 bytes on wire, 1514 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 28618954, Ack: 1429976, Len: 1460
No. Time Source Destination Protocol Info
57948 336.272954 192.168.4.230 192.168.4.210 TCP [Continuation to #57924] microsoft-ds > 2791 [ACK] Seq=28620414 Ack=1429976 Win=18980 [CHECKSUM INCORRECT] Len=1460
Frame 57948 (1514 bytes on wire, 1514 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 28620414, Ack: 1429976, Len: 1460
No. Time Source Destination Protocol Info
57949 336.272968 192.168.4.230 192.168.4.210 TCP [Continuation to #57924] microsoft-ds > 2791 [PSH, ACK] Seq=28621874 Ack=1429976 Win=18980 [CHECKSUM INCORRECT] Len=711
Frame 57949 (765 bytes on wire, 765 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 28621874, Ack: 1429976, Len: 711
No. Time Source Destination Protocol Info
57950 336.273142 192.168.4.210 192.168.4.230 TCP 2791 > microsoft-ds [ACK] Seq=1429976 Ack=28622585 Win=65535 Len=0
Frame 57950 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr: 192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds (445), Seq: 1429976, Ack: 28622585, Len: 0
No. Time Source Destination Protocol Info
57951 336.273901 192.168.4.210 192.168.4.230 SMB Close Request, FID: 0x16ab
Frame 57951 (99 bytes on wire, 99 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr: 192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds (445), Seq: 1429976, Ack: 28622585, Len: 45
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
57952 336.274114 192.168.4.230 192.168.4.210 SMB Close Response
Frame 57952 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: 00:11:85:51:f0:9b, Dst: 00:0e:0c:64:c7:ce
Internet Protocol, Src Addr: 192.168.4.230 (192.168.4.230), Dst Addr: 192.168.4.210 (192.168.4.210)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 2791 (2791), Seq: 28622585, Ack: 1430021, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
57953 336.451108 192.168.4.210 192.168.4.230 TCP 2791 > microsoft-ds [ACK] Seq=1430021 Ack=28622624 Win=65496 Len=0
Frame 57953 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:0e:0c:64:c7:ce, Dst: 00:11:85:51:f0:9b
Internet Protocol, Src Addr: 192.168.4.210 (192.168.4.210), Dst Addr: 192.168.4.230 (192.168.4.230)
Transmission Control Protocol, Src Port: 2791 (2791), Dst Port: microsoft-ds (445), Seq: 1430021, Ack: 28622624, Len: 0
More information about the samba
mailing list