Hey Guys and Gals, I'm wondering if the quotas.c file is supposed to fix the problem where a Linux x86 system running with the quota software causes corrupt files to be written by Windows clients. I compiled it in and it didn't seem to make a difference for the following problem. In other words, if I enable quotas on my RH6.2 / 2.2.16-22 kernel box and then write a file via Samba/Windows client that exceeds the quota, every byte written from the Windows client to the local (no NFS) Linux Samba share is written anyway, except that the data seems to be all zeros? Every byte before the quota is as it should be. Would it be possible to modify the 2.0 code to cause this file (directory if quota inodes) to instead be deleted? I heard that this might be changed in the 2.2 code, but I'd like to use this in a production environment. I apologize if this has already been answered somewhere.... I looked through the files included with the source, and the files on samba.org. I also took a peek at the CVS site, though I could be doing something wrong there. So, what kind of pizza vouchers work in Austrailia -- how many would you like? :)) Thanks, Jon Jon Monroe Systems Administrator ImageBuilder / Active Arts / SportsMVP.com (503) 684-5806 x 778 (503) 403-1614 FAX
Jon Monroe wrote: | In other words, if I enable quotas on my RH6.2 / 2.2.16-22 kernel | box and then write a file via Samba/Windows client that exceeds the | quota, every byte written from the Windows client to the local | (no NFS) Linux Samba share is written anyway, except that the data | seems to be all zeros? Every byte before the quota is as it should be. Yes, that's the write failing but the file length being increased. To make this even more fun, a commentator here found windows applications which extend the file first, to supposedly get it allocated on NTFS: these ones will create a Unix "holey" file... The same thing can happen on a nearly-full drive: the file gets created with nothing there, and the application can't fill in the spaces, because it doesn't have enough quota or physical disk space. If you can identify the app that's writing the files, and do a network capture, we **might** be able to suggest a fix for some but not all possible cases... --dave -- David Collier-Brown, | Always do right. This will gratify Performance & Engineering Team | some people and astonish the rest. Americas Customer Engineering | -- Mark Twain (905) 415-2849 | davecb@canada.sun.com
On 25 Jan 2001, at 10:28, Jon Monroe wrote:> Hey Guys and Gals, > > I'm wondering if the quotas.c file is supposed to fix the problem > where a Linux x86 system running with the quota software causes > corrupt files to be written by Windows clients. I compiled it in and > it didn't seem to make a difference for the following problem. > > In other words, if I enable quotas on my RH6.2 / 2.2.16-22 kernel box > and then write a file via Samba/Windows client that exceeds the quota, > every byte written from the Windows client to the local (no NFS) Linux > Samba share is written anyway, except that the data seems to be all > zeros? Every byte before the quota is as it should be. > > Would it be possible to modify the 2.0 code to cause this file > (directory if quota inodes) to instead be deleted? I heard that this > might be changed in the 2.2 code, but I'd like to use this in a > production environment. > > I apologize if this has already been answered somewhere.... I looked > through the files included with the source, and the files on > samba.org. I also took a peek at the CVS site, though I could be doing > something wrong there. > > So, what kind of pizza vouchers work in Austrailia -- how many would > you like? :)) > > Thanks, > Jon > > Jon Monroe > Systems Administrator > ImageBuilder / Active Arts / SportsMVP.com > (503) 684-5806 x 778 > (503) 403-1614 FAXWhat version of Samba do you have? Did you try this as an regular user? Quota works just fine on my RH6.2 kernel 2.4.0 and so does samba (2.0.7). What happens to you is quota problem and has nothing to do with samba. It will ,or not do, acording to your system configuration. Alin Osan Network Administrator "Fundatia Casa" http://www.tryrom.com/casa phone 059467200 fax 059467202
Hello! Ok, next try. I only attach one tcpdump because of limited mail size. 8<-------------------------------------------------------------------->8 I just read the David's mail (2001-01-25). We have the problems with SMB clients, UNIX holey files and almost full disks or quotas, too. I made some tests with the scenarios W2K server <---> NT4 client and NT4 server <---> W2K client. I just copied some files with windows explorer (_not_ Internet Explorer) from client to server, and there was an error (approx: "not enough disk space", but in German) before the client could write. The same with 'copy' in the DOS box. I attach two tcpdumps of the communication. I think these 'Unknown Errors' are the problem. Maybe it helps a little. 8<-------------------------------------------------------------------->8 Henrik -- Henrik Pletat (pletat@informatik.hu-berlin.de) -------------- next part -------------- 16:17:24.942449 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 1279397:1279465(68) ack 4130804563 win 8617>>> NBT PacketNBT Session Packet Flags=0x0 Length=64 SMB PACKET: SMBecho (REQUEST) SMB Command = 0x2B Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1506 Word Count = 1 smbvwv[]ReverbCount=1 smb_bcc=27 smb_buf[][000] 4C 57 4F 20 43 57 20 56 4C 4F 20 44 45 4F 20 4D LWO CW V LO DEO M [010] 41 57 20 4C 4D 57 20 41 52 57 00 AW LMW A RW. (DF) 16:17:24.942789 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 1:69(68) ack 68 win 17070>>> NBT PacketNBT Session Packet Flags=0x0 Length=64 SMB PACKET: SMBecho (REPLY) SMB Command = 0x2B Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1506 Word Count = 1 smbvwv[]SequenceNum=1 smb_bcc=27 smb_buf[][000] 4C 57 4F 20 43 57 20 56 4C 4F 20 44 45 4F 20 4D LWO CW V LO DEO M [010] 41 57 20 4C 4D 57 20 41 52 57 00 AW LMW A RW. (DF) 16:17:25.027019 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 68:168(100) ack 69 win 8549>>> NBT PacketNBT Session Packet Flags=0x0 Length=96 SMB PACKET: SMBtrans2 (REQUEST) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1522 Word Count = 15 TRANSACT2_QPATHINFO param_length=28 data_length=0 TotParam=28 TotData=0 MaxParam=2 MaxData=40 MaxSetup=0 Flags=0x0 TimeOut=0 Res1=0x0 ParamCnt=28 ParamOff=68 DataCnt=0 DataOff=0 SetupCnt=1 TransactionName=SMB2 ParamatersData: (28 bytes) [000] 01 01 00 00 00 00 5C 00 6C 00 69 00 6E 00 75 00 ......\. l.i.n.u. [010] 78 00 2D 00 64 00 61 00 74 00 00 00 x.-.d.a. t... Data (DF) 16:17:25.027362 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 69:173(104) ack 168 win 16970>>> NBT PacketNBT Session Packet Flags=0x0 Length=100 SMB PACKET: SMBtrans2 (REPLY) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1522 Word Count = 10 TRANSACT2_QPATHINFO param_length=2 data_length=40 TotParam=2 TotData=40 Res1=0x0 ParamCnt=2 ParamOff=56 ParamDisp0 DataCnt=40 DataOff=60 DataDisp=0 SetupCnt=0 ParamatersData: (2 bytes) [000] 00 00 .. DataData: (40 bytes) [000] 00 38 F6 E6 D9 91 C0 01 70 6D 87 19 E2 91 C0 01 .8...... pm...... [010] 90 34 6B 18 E2 91 C0 01 90 34 6B 18 E2 91 C0 01 .4k..... .4k..... [020] 10 00 00 00 6C 6C 00 02 ....ll.. (DF) 16:17:25.030027 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 168:294(126) ack 173 win 8445>>> NBT PacketNBT Session Packet Flags=0x0 Length=122 WARNING: Short packet. Try increasing the snap length (120) SMB PACKET: SMBtrans2 (REQUEST) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1538 Word Count = 15 TRANSACT2_FINDFIRST param_length=54 data_length=0 TotParam=54 TotData=0 MaxParam=10 MaxData=608 MaxSetup=0 Flags=0x0 TimeOut=0 Res1=0x0 ParamCnt=54 ParamOff=68 DataCnt=0 DataOff=0 SetupCnt=1 TransactionName=SMB2 Attribute=HIDDEN SYSTEM DIR SearchCount=6 Flags=0x5 Level=260 FileData: (40 bytes) [000] 6C 00 69 00 6E 00 75 00 78 00 2D 00 64 00 61 00 l.i.n.u. x.-.d.a. [010] 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 t....... ........ [020] 00 00 00 00 00 00 00 00 ........ (DF) 16:17:25.030320 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 173:245(72) ack 294 win 16844>>> NBT PacketNBT Session Packet Flags=0x0 Length=68 SMB PACKET: SMBtrans2 (REPLY) SMB Command = 0x32 Error class = 0xF Error code = 49152 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1538 Word Count = 0 SMBError = ERROR: Unknown error (15,49152) TRANSACT2_FINDFIRST param_length=0 data_length=0 Trans2Interim (DF) 16:17:25.032872 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 294:424(130) ack 245 win 8373>>> NBT PacketNBT Session Packet Flags=0x0 Length=126 WARNING: Short packet. Try increasing the snap length (120) SMB PACKET: SMBunknown (REQUEST) SMB Command = 0xA2 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1554 Word Count = 24 smbvwv[]smb_vwv[0]=255 (0xFF) smb_vwv[1]=0 (0x0) smb_vwv[2]=10240 (0x2800) smb_vwv[3]=1536 (0x600) smb_vwv[4]=0 (0x0) smb_vwv[5]=0 (0x0) smb_vwv[6]=0 (0x0) smb_vwv[7]=38400 (0x9600) smb_vwv[8]=769 (0x301) smb_vwv[9]=0 (0x0) smb_vwv[10]=0 (0x0) smb_vwv[11]=0 (0x0) smb_vwv[12]=0 (0x0) smb_vwv[13]=8192 (0x2000) smb_vwv[14]=0 (0x0) smb_vwv[15]=0 (0x0) smb_vwv[16]=0 (0x0) smb_vwv[17]=1280 (0x500) smb_vwv[18]=0 (0x0) smb_vwv[19]=17408 (0x4400) smb_vwv[20]=0 (0x0) smb_vwv[21]=512 (0x200) smb_vwv[22]=0 (0x0) smb_vwv[23]=768 (0x300) smb_bcc=43 smb_buf[][000] 00 5C 00 6C 00 69 00 6E 00 75 00 78 00 2D 00 64 .\.l.i.n .u.x.-.d [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 ..... (DF) 16:17:25.033515 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 245:352(107) ack 424 win 16714>>> NBT PacketNBT Session Packet Flags=0x0 Length=103 SMB PACKET: SMBunknown (REPLY) SMB Command = 0xA2 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1554 Word Count = 34 smbvwv[]smb_vwv[0]=255 (0xFF) smb_vwv[1]=103 (0x67) smb_vwv[2]=3330 (0xD02) smb_vwv[3]=576 (0x240) smb_vwv[4]=0 (0x0) smb_vwv[5]=12288 (0x3000) smb_vwv[6]=13757 (0x35BD) smb_vwv[7]=57912 (0xE238) smb_vwv[8]=49297 (0xC091) smb_vwv[9]=12289 (0x3001) smb_vwv[10]=13757 (0x35BD) smb_vwv[11]=57912 (0xE238) smb_vwv[12]=49297 (0xC091) smb_vwv[13]=12289 (0x3001) smb_vwv[14]=13757 (0x35BD) smb_vwv[15]=57912 (0xE238) smb_vwv[16]=49297 (0xC091) smb_vwv[17]=12289 (0x3001) smb_vwv[18]=13757 (0x35BD) smb_vwv[19]=57912 (0xE238) smb_vwv[20]=49297 (0xC091) smb_vwv[21]=8193 (0x2001) smb_vwv[22]=0 (0x0) smb_vwv[23]=0 (0x0) smb_vwv[24]=0 (0x0) smb_vwv[25]=0 (0x0) smb_vwv[26]=0 (0x0) smb_vwv[27]=0 (0x0) smb_vwv[28]=0 (0x0) smb_vwv[29]=0 (0x0) smb_vwv[30]=0 (0x0) smb_vwv[31]=0 (0x0) smb_vwv[32]=0 (0x0) smb_vwv[33]=0 (0x0) smb_bcc=0 (DF) 16:17:25.033661 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 352:460(108) ack 424 win 16714>>> NBT PacketNBT Session Packet Flags=0x0 Length=104 SMB PACKET: SMBunknown (REPLY) SMB Command = 0xA0 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1393 Word Count = 18 smbvwv[]smb_vwv[0]=0 (0x0) smb_vwv[1]=7680 (0x1E00) smb_vwv[2]=0 (0x0) smb_vwv[3]=0 (0x0) smb_vwv[4]=0 (0x0) smb_vwv[5]=7680 (0x1E00) smb_vwv[6]=0 (0x0) smb_vwv[7]=18432 (0x4800) smb_vwv[8]=0 (0x0) smb_vwv[9]=0 (0x0) smb_vwv[10]=0 (0x0) smb_vwv[11]=0 (0x0) smb_vwv[12]=0 (0x0) smb_vwv[13]=26624 (0x6800) smb_vwv[14]=0 (0x0) smb_vwv[15]=0 (0x0) smb_vwv[16]=0 (0x0) smb_vwv[17]=0 (0x0) smb_bcc=33 smb_buf[][000] 03 00 00 00 00 01 00 00 00 12 00 00 00 44 00 41 ........ .....D.A [010] 00 54 00 45 00 4E 00 2E 00 4C 00 5A 00 00 00 00 .T.E.N.. .L.Z.... [020] 00 . (DF) 16:17:25.033792 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: . 424:424(0) ack 460 win 8158 (DF) 16:17:25.034295 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 424:476(52) ack 460 win 8158>>> NBT PacketNBT Session Packet Flags=0x0 Length=48 SMB PACKET: SMBwrite (REQUEST) SMB Command = 0xB Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1570 Word Count = 5 smbvwv[]Handle=16397 ByteCount=0 Offset=1305594 CountLeft=0 smb_bcc=3 smb_buf[][000] 01 00 00 ... (DF) 16:17:25.034575 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 460:499(39) ack 476 win 16662>>> NBT PacketNBT Session Packet Flags=0x0 Length=35 SMB PACKET: SMBwrite (REPLY) SMB Command = 0xB Error class = 0x7F Error code = 49152 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1570 Word Count = 0 SMBError = ERROR: Unknown error (127,49152) smbvwv[]Count=smb_bcc=0 (DF) 16:17:25.034951 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 476:561(85) ack 499 win 8119>>> NBT PacketNBT Session Packet Flags=0x0 Length=81 SMB PACKET: SMBunknown (REQUEST) SMB Command = 0xA0 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1585 Word Count = 23 smbvwv[]smb_vwv[0]=0 (0x0) smb_vwv[1]=0 (0x0) smb_vwv[2]=0 (0x0) smb_vwv[3]=0 (0x0) smb_vwv[4]=0 (0x0) smb_vwv[5]=8192 (0x2000) smb_vwv[6]=0 (0x0) smb_vwv[7]=0 (0x0) smb_vwv[8]=0 (0x0) smb_vwv[9]=0 (0x0) smb_vwv[10]=0 (0x0) smb_vwv[11]=0 (0x0) smb_vwv[12]=0 (0x0) smb_vwv[13]=0 (0x0) smb_vwv[14]=0 (0x0) smb_vwv[15]=0 (0x0) smb_vwv[16]=0 (0x0) smb_vwv[17]=1024 (0x400) smb_vwv[18]=4 (0x4) smb_vwv[19]=3 (0x3) smb_vwv[20]=0 (0x0) smb_vwv[21]=16394 (0x400A) smb_vwv[22]=1 (0x1) smb_bcc=0 (DF) 16:17:25.169603 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: . 499:499(0) ack 561 win 16577 (DF) 16:17:25.169939 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 561:642(81) ack 499 win 8119>>> NBT PacketNBT Session Packet Flags=0x0 Length=77 SMB PACKET: SMBtrans2 (REQUEST) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1602 Word Count = 15 TRANSACT2_SETFILEINFO param_length=6 data_length=1 TotParam=6 TotData=1 MaxParam=6 MaxData=0 MaxSetup=0 Flags=0x0 TimeOut=0 Res1=0x0 ParamCnt=6 ParamOff=68 DataCnt=1 DataOff=76 SetupCnt=1 TransactionName=ParamatersData: (6 bytes) [000] 0D 40 02 01 00 D5 .@.... DataData: (1 bytes) [000] 01 . (DF) 16:17:25.170244 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 499:563(64) ack 642 win 16496>>> NBT PacketNBT Session Packet Flags=0x0 Length=60 SMB PACKET: SMBtrans2 (REPLY) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1602 Word Count = 10 TRANSACT2_SETFILEINFO param_length=2 data_length=0 TotParam=2 TotData=0 Res1=0x0 ParamCnt=2 ParamOff=56 ParamDisp0 DataCnt=0 DataOff=60 DataDisp=0 SetupCnt=0 ParamatersData: (2 bytes) [000] 00 00 .. Data (DF) 16:17:25.170657 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 642:688(46) ack 563 win 8055>>> NBT PacketNBT Session Packet Flags=0x0 Length=42 SMB PACKET: SMBclose (REQUEST) SMB Command = 0x4 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1618 Word Count = 3 smbvwv[]Handle=16397 Time=NULL smb_bcc=0 (DF) 16:17:25.170924 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 563:602(39) ack 688 win 16450>>> NBT PacketNBT Session Packet Flags=0x0 Length=35 SMB PACKET: SMBclose (REPLY) SMB Command = 0x4 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1618 Word Count = 0 smb_bcc=0 (DF) 16:17:25.171099 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 602:710(108) ack 688 win 16450>>> NBT PacketNBT Session Packet Flags=0x0 Length=104 SMB PACKET: SMBunknown (REPLY) SMB Command = 0xA0 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1440 Word Count = 18 smbvwv[]smb_vwv[0]=0 (0x0) smb_vwv[1]=7680 (0x1E00) smb_vwv[2]=0 (0x0) smb_vwv[3]=0 (0x0) smb_vwv[4]=0 (0x0) smb_vwv[5]=7680 (0x1E00) smb_vwv[6]=0 (0x0) smb_vwv[7]=18432 (0x4800) smb_vwv[8]=0 (0x0) smb_vwv[9]=0 (0x0) smb_vwv[10]=0 (0x0) smb_vwv[11]=0 (0x0) smb_vwv[12]=0 (0x0) smb_vwv[13]=26624 (0x6800) smb_vwv[14]=0 (0x0) smb_vwv[15]=0 (0x0) smb_vwv[16]=0 (0x0) smb_vwv[17]=0 (0x0) smb_bcc=33 smb_buf[][000] 03 00 00 00 00 02 00 00 00 12 00 00 00 44 00 41 ........ .....D.A [010] 00 54 00 45 00 4E 00 2E 00 4C 00 5A 00 00 00 00 .T.E.N.. .L.Z.... [020] 00 . (DF) 16:17:25.171242 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: . 688:688(0) ack 710 win 7908 (DF) 16:17:25.175743 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 688:773(85) ack 710 win 7908>>> NBT PacketNBT Session Packet Flags=0x0 Length=81 SMB PACKET: SMBunknown (REQUEST) SMB Command = 0xA0 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1632 Word Count = 23 smbvwv[]smb_vwv[0]=0 (0x0) smb_vwv[1]=0 (0x0) smb_vwv[2]=0 (0x0) smb_vwv[3]=0 (0x0) smb_vwv[4]=0 (0x0) smb_vwv[5]=8192 (0x2000) smb_vwv[6]=0 (0x0) smb_vwv[7]=0 (0x0) smb_vwv[8]=0 (0x0) smb_vwv[9]=0 (0x0) smb_vwv[10]=0 (0x0) smb_vwv[11]=0 (0x0) smb_vwv[12]=0 (0x0) smb_vwv[13]=0 (0x0) smb_vwv[14]=0 (0x0) smb_vwv[15]=0 (0x0) smb_vwv[16]=0 (0x0) smb_vwv[17]=1024 (0x400) smb_vwv[18]=4 (0x4) smb_vwv[19]=3 (0x3) smb_vwv[20]=0 (0x0) smb_vwv[21]=16394 (0x400A) smb_vwv[22]=1 (0x1) smb_bcc=0 (DF) 16:17:25.369866 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: . 710:710(0) ack 773 win 16365 (DF) 16:17:26.384877 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 773:883(110) ack 710 win 7908>>> NBT PacketNBT Session Packet Flags=0x0 Length=106 SMB PACKET: SMBtrans2 (REQUEST) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1650 Word Count = 15 TRANSACT2_FINDFIRST param_length=38 data_length=0 TotParam=38 TotData=0 MaxParam=10 MaxData=16384 MaxSetup=0 Flags=0x0 TimeOut=0 Res1=0x0 ParamCnt=38 ParamOff=68 DataCnt=0 DataOff=0 SetupCnt=1 TransactionName=SMB2 Attribute=HIDDEN SYSTEM DIR SearchCount=170 Flags=0x4 Level=260 FileData: (24 bytes) [000] 6C 00 69 00 6E 00 75 00 78 00 2D 00 64 00 61 00 l.i.n.u. x.-.d.a. [010] 74 00 00 00 00 00 00 00 t....... (DF) 16:17:26.386969 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 710:1970(1260) ack 883 win 16255>>> NBT PacketNBT Session Packet Flags=0x0 Length=1256 WARNING: Short packet. Try increasing the snap length (120) SMB PACKET: SMBtrans2 (REPLY) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 54528 UID = 2048 MID = 1650 Word Count = 10 TRANSACT2_FINDFIRST param_length=10 data_length=1188 TotParam=10 TotData=1188 Res1=0x0 ParamCnt=10 ParamOff=56 ParamDisp0 DataCnt=1188 DataOff=68 DataDisp=0 SetupCnt=0 Handle=0x1002 Count=12 EOS=0x1 Eoffset=0 LastNameOfs=0x43C data: [000] 64 00 00 00 00 00 00 00 00 38 F6 E6 D9 91 C0 01 d....... .8...... [010] 70 6D 87 19 E2 91 C0 01 D0 21 4B 38 E2 91 C0 01 pm...... .!K8.... [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [3A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [3B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [3C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [3D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [3E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [3F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [460] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [470] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [480] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [490] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [4A0] 00 00 00 00 .... (DF) 16:17:26.391193 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 883:924(41) ack 1970 win 8760>>> NBT PacketNBT Session Packet Flags=0x0 Length=37 SMB PACKET: SMBfindclose (REQUEST) SMB Command = 0x34 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1666 Word Count = 1 smbvwv[]Handle=4098 smb_bcc=0 (DF) 16:17:26.391555 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 1970:2009(39) ack 924 win 16214>>> NBT PacketNBT Session Packet Flags=0x0 Length=35 SMB PACKET: SMBfindclose (REPLY) SMB Command = 0x34 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1666 Word Count = 0 smb_bcc=0 (DF) 16:17:26.395456 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: P 924:1024(100) ack 2009 win 8721>>> NBT PacketNBT Session Packet Flags=0x0 Length=96 SMB PACKET: SMBtrans2 (REQUEST) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x18 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1682 Word Count = 15 TRANSACT2_QPATHINFO param_length=28 data_length=0 TotParam=28 TotData=0 MaxParam=2 MaxData=40 MaxSetup=0 Flags=0x0 TimeOut=0 Res1=0x0 ParamCnt=28 ParamOff=68 DataCnt=0 DataOff=0 SetupCnt=1 TransactionName=SMB2 ParamatersData: (28 bytes) [000] 01 01 00 00 00 00 5C 00 6C 00 69 00 6E 00 75 00 ......\. l.i.n.u. [010] 78 00 2D 00 64 00 61 00 74 00 00 00 x.-.d.a. t... Data (DF) 16:17:26.395696 192.168.130.44.netbios-ssn > 192.168.130.6.iad1: P 2009:2113(104) ack 1024 win 16114>>> NBT PacketNBT Session Packet Flags=0x0 Length=100 SMB PACKET: SMBtrans2 (REPLY) SMB Command = 0x32 Error class = 0x0 Error code = 0 Flags1 = 0x98 Flags2 = 0x3 Tree ID = 2049 Proc ID = 51966 UID = 2048 MID = 1682 Word Count = 10 TRANSACT2_QPATHINFO param_length=2 data_length=40 TotParam=2 TotData=40 Res1=0x0 ParamCnt=2 ParamOff=56 ParamDisp0 DataCnt=40 DataOff=60 DataDisp=0 SetupCnt=0 ParamatersData: (2 bytes) [000] 00 00 .. DataData: (40 bytes) [000] 00 38 F6 E6 D9 91 C0 01 80 07 04 39 E2 91 C0 01 .8...... ...9.... [010] D0 21 4B 38 E2 91 C0 01 D0 21 4B 38 E2 91 C0 01 .!K8.... .!K8.... [020] 10 00 00 00 6C 6C 00 02 ....ll.. (DF) 16:17:26.534264 192.168.130.6.iad1 > 192.168.130.44.netbios-ssn: . 1024:1024(0) ack 2113 win 8617 (DF)