[Samba] debugging really high network usage with no apparent cause

[Volker Lendecke]

On Thu, May 05, 2011 at 01:31:35PM -0700, chris (fool) mccraw wrote:
> about 80% as TCP "[TCP segment of a reassembled PDU]",
> ~10% as TCP, "60579 > microsoft-ds [ACK] Seq=<integer> Ack=<other
> integer> Win=65535, Len=0"
> ~5% as SMB "Read andX Request, FID 0x2aee, 16384 bytes at offset <integer>"
> ~5% as SMB "Read AndX Response, 16384 bytes"

Virus scanner on the client scanning network shares?

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen