[cifs-discuss] Spontaneous SMB session failure

[Afshin Salek]

Text outputs of snoop are not usually helpful for analyzing SMB traffic.
We'd prefer the binary output which can be captured with -o option. Or
you can use wireshark.

Afshin

Devon Buffington wrote:
> Hello,
> I work with Phil and we have captured several snoop outputs where the session setup failed. I have clipped some lines before the error and posted them below. Do you want the entire snoop file, which are ~3MB, and ~14MB. If you want the files, I will need to sanitize them a bit, so they would be in text format.
> There is nothing across the wire after these lines, and we are going to need to restart the service in order to get CIFS to work again.
> 
> 18112	0.00001		thumper -> windows_host NBT R port=2235
> 18113	0.00015		thumper -> windows_host NBT Type=POSITIVE SESSION RESPONSE Length=0
> 18114	0.00462 windows_host -> thumper		NBT C port=2235
> 18115	0.00001		thumper -> windows_host NBT R port=2235
> 18116	0.00002		thumper -> windows_host NBT R port=2235
> 18117	0.00009 windows_host -> thumper		NBT C port=2235
> 18118	0.03354 windows_host -> thumper		SMB C Code=0x72 Name=SMBnegprot LastDialect=NT LM 0.12 Error=0
> 18119	0.00001		thumper -> windows_host SMB R port=2234
> 18120	0.00010		thumper -> windows_host SMB R Code=0x72 Name=SMBnegprot Dialect#=5 Error=0
> 18121	0.01878 windows_host -> thumper		SMB C Code=0x73 Name=SMBsesssetupX Username=<omitted for security> Error=0
> 18122	0.00001		thumper -> windows_host SMB R port=2234
> 18123	0.03681		thumper -> windows_host SMB R Code=0x73 Name=SMBsesssetupX Error=2
> 18124	0.01050 windows_host -> thumper		SMB C port=2234
> 18125	0.00002		thumper -> windows_host SMB R port=2234
> 18126	0.00004		thumper -> windows_host SMB R port=2234
> 18127	0.00005 windows_host -> thumper		SMB C port=2234
> 
> Thanks,
> Devon
> --
> This messages posted from opensolaris.org
> _______________________________________________
> cifs-discuss mailing list
> cifs-discuss at opensolaris.org
> http://mail.opensolaris.org/mailman/listinfo/cifs-discuss