[Samba] Lots of smbd processes and connections?

[Brian]

> [2009/10/17 08:11:28, 0] smbd/service.c:make_connection(800)
> dads-pc (10.0.2.124) couldn't find service roo

> -----Original Message-----
> From: Matthew Dickinson [mailto:matt-samba at alpha345.com]
> Sent: Wednesday, October 28, 2009 6:37 PM
> On 10/28/09 6:21 PM, "Jeremy Allison" <jra at samba.org> wrote:
> > Not enough detail. Get a log level 10 plus a wireshark trace please.
> >
> > Jeremy.
> 
> Since it might be the same problem I'm having, I have those available
> on the
> bugzilla page ( https://bugzilla.samba.org/show_bug.cgi?id=6782)
> 
> Matthew


Problem solved / culprit found!

Behavior in question:

The last character of the service name is truncated and couldn't find
service

First off, this behavior is pretty well documented....it even appears noted
as an odd behavior in a MS White Paper.  Normally not a big deal as MS
clients
would provide a few requests with the truncated service name the correct
itself.
For example you can get a Windoze client to repeat the situation by
requesting
properties of a share from explorer and it will result in 3 or 4 truncated
service
name requests.

My problem was the client was spamming the server with > 1000 requests / sec
flooding logs and bogging down the server.

My situation was related to resident software on the client called:

CyberLink Media Libray
HP TouchSmart
HP MediaSmart

I think they are all basically the same product with different names

One of these processes was spamming the server looking for media I suspect.

I uninstalled it and the spamming stopped.

In particular the problem resided with a process call CLMLSvc.exe.  Once
killed
the spamming went away.

Matt, I would check you clients for similar software.

Cheers
Brian