On 2/11/24 21:54, Programnet wrote: > pcap is on my google drive That looks innocuous enough. What do you see in the logs if you have log level = auth:6 in smb.conf? Douglas