[Samba] The case of the disconnecting network shares

[Volker Lendecke]

On Tue, Dec 15, 2015 at 04:07:55PM +1100, John Gardeniers wrote:
> Wireshark would be impractical in this case because I can't predict
> when the disconnects will occur, or even if they will occur for any
> given client, and this is a very busy file server, even during the
> night. Therefore, the logs would be far too immense to be useful
> without first knowing exactly what event(s) I'm looking for.

You can limit tcpdump to a single client with "host <ip-address>". And
multi-gigabyte traces can be split up. I'm used to that :-)

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de