samba - Feb 2005 - 3.0.7 - NT Create AndX Response, Error:, QUERY_PATH_INFO, Error:

<earlier, David Rankin wrote to no avail:>

Mates,

    I have been watching a developing problem over the past few weeks. Most
likely a M$ patch to XP that has caused problems. What happens is that XP
clients try to open the standard "File" -> "Open" dialog
(like in word, or
whatever) and the file open dialog hangs and stops responding for 15 seconds
or so. I have captured this occurence with ethereal and included the packet
summary below. The 80 packets below represent the 23 second hang. I am
running 3.0.7. Does anybody have any idea what could be happening?

    Note the 3 second delay between packet 27 & 28. It also appears that XP
does some dns caching that is persistant during shutdown and restart. I have
the laptop at home right now, but you can see the NBNS packets still looking
for "Nemesis" and "Bonza" which are two samba servers at
work. Go figure??

    Any ideas what is happening or how to fix it??

No.     Time        Source                Destination           Protocol
Info
      1 0.000000    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
\personal\soccer\foo
      2 0.002022    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
      3 0.002591    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
\personal\soccer
      4 0.004184    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO
      5 0.004569    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
      6 0.005798    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO
      7 0.005889    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info
      8 0.007271    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_FS_INFO
      9 0.007794    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal
     10 0.009805    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: personal
     11 0.009994    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \personal
     12 0.011386    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_PATH_INFO
     13 0.011486    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal\soccer
     14 0.014312    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: soccer
     15 0.014530    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal\soccer\*
     16 0.019445    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: . .. Summary - Raptors fall 03.doc
raptors fall04 email.txt soccermanual.pdf Roster.doc fields.jpg
coaches_email.txt NYSA revised MasterFall03-U6_U12gb.9-11-03xls.xls FIELD
SIGN-UPS.doc[Unreassembled Packet]
     17 0.019911    www.3111skyline.com   rankin-p35.3111skyline.com TCP
[Continuation to #16] microsoft-ds > 1388 [ACK] Seq=2255 Ack=828 Win=10056
Len=1460
     18 0.019932    rankin-p35.3111skyline.com www.3111skyline.com   TCP
1388 > microsoft-ds [ACK] Seq=828 Ack=3715 Win=17520 Len=0
     19 0.021182    www.3111skyline.com   rankin-p35.3111skyline.com TCP
[Continuation to #16] microsoft-ds > 1388 [PSH, ACK] Seq=3715 Ack=828
Win=10056 Len=1156
     20 0.021636    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info
     21 0.022928    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, QUERY_FS_INFO
     22 0.074918    rankin-p35.3111skyline.com www.3111skyline.com   SMB
Trans2 Request, FIND_FIRST2, Pattern: \personal\soccer\*
     23 0.079857    www.3111skyline.com   rankin-p35.3111skyline.com SMB
Trans2 Response, FIND_FIRST2, Files: . .. Summary - Raptors fall 03.doc
raptors fall04 email.txt soccermanual.pdf Roster.doc fields.jpg
coaches_email.txt NYSA revised MasterFall03-U6_U12gb.9-11-03xls.xls FIELD
SIGN-UPS.doc[Unreassembled Packet]
     24 0.080386    www.3111skyline.com   rankin-p35.3111skyline.com TCP
[Continuation to #23] microsoft-ds > 1388 [ACK] Seq=6411 Ack=1024 Win=10056
Len=1460
     25 0.080431    rankin-p35.3111skyline.com www.3111skyline.com   TCP
1388 > microsoft-ds [ACK] Seq=1024 Ack=7871 Win=17520 Len=0
     26 0.080891    www.3111skyline.com   rankin-p35.3111skyline.com TCP
[Continuation to #23] microsoft-ds > 1388 [PSH, ACK] Seq=7871 Ack=1024
Win=10056 Len=1156
     27 0.208734    rankin-p35.3111skyline.com www.3111skyline.com   TCP
1388 > microsoft-ds [ACK] Seq=1024 Ack=9027 Win=16364 Len=0
     28 3.096180    rankin-p35.3111skyline.com www.3111skyline.com   SMB
NT Create AndX Request, Path: \personal\soccer\wiashext.dll
     29 3.098333    www.3111skyline.com   rankin-p35.3111skyline.com SMB
NT Create AndX Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
     30 3.190211    rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB NEMESIS<20>
     31 3.190297    rankin-p35.3111skyline.com www.3111skyline.com   DNS
Standard query A Nemesis.3111skyline.com
     32 3.191525    www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     33 3.192732    www.3111skyline.com   rankin-p35.3111skyline.com DNS
Standard query response, No such name
     34 3.192796    rankin-p35.3111skyline.com www.3111skyline.com   DNS
Standard query A Nemesis.3111skyline.com
     35 3.194183    www.3111skyline.com   rankin-p35.3111skyline.com DNS
Standard query response, No such name
     36 3.194314    rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB NEMESIS<00>
     37 3.195414    www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     38 3.213972    rankin-p35.3111skyline.com www.3111skyline.com   TCP
1388 > microsoft-ds [ACK] Seq=1172 Ack=9066 Win=16325 Len=0
     39 3.214050    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<20>
     40 3.214113    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     41 3.906075    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<20>
     42 3.906167    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     43 4.609998    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<20>
     44 4.610084    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     45 5.358615    rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB NEMESIS<00>
     46 5.360235    www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     47 5.388797    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     48 6.110623    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     49 6.859316    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     50 7.606064    rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB NEMESIS<00>
     51 7.607177    www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     52 7.633629    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     53 8.360191    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     54 9.090103    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB NEMESIS<00>
     55 9.859290    rankin-p35.3111skyline.com www.3111skyline.com   DNS
Standard query A Bonza.3111skyline.com
     56 9.859290    rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB BONZA<20>
     57 9.860650    www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     58 9.861622    www.3111skyline.com   rankin-p35.3111skyline.com DNS
Standard query response, No such name
     59 9.861685    rankin-p35.3111skyline.com www.3111skyline.com   DNS
Standard query A Bonza.3111skyline.com
     60 9.863024    www.3111skyline.com   rankin-p35.3111skyline.com DNS
Standard query response, No such name
     61 9.863148    rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB BONZA<00>
     62 9.864250    www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     63 9.886909    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<20>
     64 9.886973    rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     65 10.596376   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<20>
     66 10.596461   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     67 11.339334   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<20>
     68 11.339398   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     69 12.089546   rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB BONZA<00>
     70 12.090676   www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     71 12.120034   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     72 12.865485   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     73 13.598274   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     74 14.345893   rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB BONZA<00>
     75 14.347088   www.3111skyline.com   rankin-p35.3111skyline.com NBNS
Name query response[Malformed Packet]
     76 14.373805   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     77 15.110526   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     78 15.858844   rankin-p35.3111skyline.com 192.168.6.255         NBNS
Name query NB BONZA<00>
     79 23.724154   rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB NEMESIS<20>
     80 23.724193   rankin-p35.3111skyline.com www.3111skyline.com   NBNS
Name query NB NEMESIS<00>




--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--