Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] SMB Question

From: "John Martin" <JOHNM@xxxxxxxxx>
Date: Tue, 15 Apr 2008 14:27:15 -0400

I had a similar issue with a db application taking 60 seconds or more to open up over a T1 connection.  I remember reading, but cannot remember where, haven’t been able to find it, and I can’t remember if I was researching the same error message, that the extra back and forth that you’re seeing has something to do with SMB checking alternate data streams on the targeted file.  Rather than troubleshoot that, I was able to offer the users an offline solution where the clients would sync at the end of the session, rather than access all the info up front.  Perhaps a solution like that would help?

 


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Barry Constantine
Sent: Tuesday, April 15, 2008 12:43 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] SMB Question

 

I would google the error message; sorry.

 


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of St Onge,Adam
Sent: Tuesday, April 15, 2008 12:23 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] SMB Question

 

33ms.

 

Thanks,

Adam

 


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Barry Constantine
Sent: Tuesday, April 15, 2008 12:21 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] SMB Question

 

What is the latency between the two hosts (approximately)?

 

 


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of St Onge,Adam
Sent: Monday, April 14, 2008 9:25 PM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] SMB Question

 

I am having a problem with slow response over an oc3 wan link using Microsoft office documents, specifically excel documents. The users are attempting to open roughly a 100kb file and takes approx 90 seconds to open.  I sniffed the traffic and have been combing through the frames with Wireshark but I see a confusing pattern. The workstation frequently attempts “NT Create Andx Request” and the server then immediately returns with “Error: Status_Access_Denied”.  This pattern repeats over and over again during this conversation and I suspect it may have something to do with the slow response these users are experiencing. I have spent a lot of time on google trying to determine this and keep coming up empty handed…

 

Does anyone have any insight as to what may be going on here?

 

Thanks,

 

Adam

 

==============================================================================
This communication, together with any attachments hereto or links contained herein, is for the sole use of the intended recipient(s) and may contain information that is confidential or legally protected. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, dissemination, distribution or use of this communication is STRICTLY PROHIBITED.  If you have received this communication in error, please notify the sender immediately by return e-mail message and delete the original and all copies of the communication, along with any attachments hereto or links herein, from your system.
 
==============================================================================
The Travelers e-mail system made this annotation on 04/14/08, 21:24:38.
 
==============================================================================
This communication, together with any attachments hereto or links contained herein, is for the sole use of the intended recipient(s) and may contain information that is confidential or legally protected. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, dissemination, distribution or use of this communication is STRICTLY PROHIBITED.  If you have received this communication in error, please notify the sender immediately by return e-mail message and delete the original and all copies of the communication, along with any attachments hereto or links herein, from your system.
 
==============================================================================
The Travelers e-mail system made this annotation on 04/15/08, 12:23:25.