Mates,
I have been watching a developing problem over the past few weeks. Most
likely a M$ patch to XP that has caused problems. What happens is that XP
clients try to open the standard "File" -> "Open" dialog
(like in word, or
whatever) and the file open dialog hangs and stops responding for 15 seconds
or so. I have captured this occurence with ethereal and included the packet
summary below. The 80 packets below represent the 23 second hang. I am
running 3.0.7. Does anybody have any idea what could be happening?
Note the 3 second delay between packet 27 & 28. It also appears that XP
does some dns caching that is persistant during shutdown and restart. I have
the laptop at home right now, but you can see the NBNS packets still looking
for "Nemesis" and "Bonza" which are two samba servers at
work. Go figure??
Any ideas what is happening or how to fix it??
No. Time Source Destination Protocol
Info
1 0.000000 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
\personal\soccer\foo
2 0.002022 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
3 0.002591 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
\personal\soccer
4 0.004184 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO
5 0.004569 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
6 0.005798 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO
7 0.005889 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info
8 0.007271 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_FS_INFO
9 0.007794 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal
10 0.009805 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: personal
11 0.009994 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \personal
12 0.011386 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO
13 0.011486 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal\soccer
14 0.014312 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: soccer
15 0.014530 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal\soccer\*
16 0.019445 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: . .. Summary - Raptors fall 03.doc
raptors fall04 email.txt soccermanual.pdf Roster.doc fields.jpg
coaches_email.txt NYSA revised MasterFall03-U6_U12gb.9-11-03xls.xls FIELD
SIGN-UPS.doc[Unreassembled Packet]
17 0.019911 www.3111skyline.com rankin-p35.3111skyline.com TCP
[Continuation to #16] microsoft-ds > 1388 [ACK] Seq=2255 Ack=828 Win=10056
Len=1460
18 0.019932 rankin-p35.3111skyline.com www.3111skyline.com TCP
1388 > microsoft-ds [ACK] Seq=828 Ack=3715 Win=17520 Len=0
19 0.021182 www.3111skyline.com rankin-p35.3111skyline.com TCP
[Continuation to #16] microsoft-ds > 1388 [PSH, ACK] Seq=3715 Ack=828
Win=10056 Len=1156
20 0.021636 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info
21 0.022928 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_FS_INFO
22 0.074918 rankin-p35.3111skyline.com www.3111skyline.com SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal\soccer\*
23 0.079857 www.3111skyline.com rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: . .. Summary - Raptors fall 03.doc
raptors fall04 email.txt soccermanual.pdf Roster.doc fields.jpg
coaches_email.txt NYSA revised MasterFall03-U6_U12gb.9-11-03xls.xls FIELD
SIGN-UPS.doc[Unreassembled Packet]
24 0.080386 www.3111skyline.com rankin-p35.3111skyline.com TCP
[Continuation to #23] microsoft-ds > 1388 [ACK] Seq=6411 Ack=1024 Win=10056
Len=1460
25 0.080431 rankin-p35.3111skyline.com www.3111skyline.com TCP
1388 > microsoft-ds [ACK] Seq=1024 Ack=7871 Win=17520 Len=0
26 0.080891 www.3111skyline.com rankin-p35.3111skyline.com TCP
[Continuation to #23] microsoft-ds > 1388 [PSH, ACK] Seq=7871 Ack=1024
Win=10056 Len=1156
27 0.208734 rankin-p35.3111skyline.com www.3111skyline.com TCP
1388 > microsoft-ds [ACK] Seq=1024 Ack=9027 Win=16364 Len=0
28 3.096180 rankin-p35.3111skyline.com www.3111skyline.com SMB
NT Create AndX Request, Path: \personal\soccer\wiashext.dll
29 3.098333 www.3111skyline.com rankin-p35.3111skyline.com SMB
NT Create AndX Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
30 3.190211 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB NEMESIS<20>
31 3.190297 rankin-p35.3111skyline.com www.3111skyline.com DNS
Standard query A Nemesis.3111skyline.com
32 3.191525 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
33 3.192732 www.3111skyline.com rankin-p35.3111skyline.com DNS
Standard query response, No such name
34 3.192796 rankin-p35.3111skyline.com www.3111skyline.com DNS
Standard query A Nemesis.3111skyline.com
35 3.194183 www.3111skyline.com rankin-p35.3111skyline.com DNS
Standard query response, No such name
36 3.194314 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB NEMESIS<00>
37 3.195414 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
38 3.213972 rankin-p35.3111skyline.com www.3111skyline.com TCP
1388 > microsoft-ds [ACK] Seq=1172 Ack=9066 Win=16325 Len=0
39 3.214050 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<20>
40 3.214113 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
41 3.906075 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<20>
42 3.906167 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
43 4.609998 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<20>
44 4.610084 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
45 5.358615 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB NEMESIS<00>
46 5.360235 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
47 5.388797 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
48 6.110623 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
49 6.859316 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
50 7.606064 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB NEMESIS<00>
51 7.607177 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
52 7.633629 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
53 8.360191 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
54 9.090103 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB NEMESIS<00>
55 9.859290 rankin-p35.3111skyline.com www.3111skyline.com DNS
Standard query A Bonza.3111skyline.com
56 9.859290 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB BONZA<20>
57 9.860650 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
58 9.861622 www.3111skyline.com rankin-p35.3111skyline.com DNS
Standard query response, No such name
59 9.861685 rankin-p35.3111skyline.com www.3111skyline.com DNS
Standard query A Bonza.3111skyline.com
60 9.863024 www.3111skyline.com rankin-p35.3111skyline.com DNS
Standard query response, No such name
61 9.863148 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB BONZA<00>
62 9.864250 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
63 9.886909 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<20>
64 9.886973 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
65 10.596376 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<20>
66 10.596461 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
67 11.339334 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<20>
68 11.339398 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
69 12.089546 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB BONZA<00>
70 12.090676 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
71 12.120034 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
72 12.865485 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
73 13.598274 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
74 14.345893 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB BONZA<00>
75 14.347088 www.3111skyline.com rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
76 14.373805 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
77 15.110526 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
78 15.858844 rankin-p35.3111skyline.com 192.168.6.255 NBNS
Name query NB BONZA<00>
79 23.724154 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB NEMESIS<20>
80 23.724193 rankin-p35.3111skyline.com www.3111skyline.com NBNS
Name query NB NEMESIS<00>
--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--