Wireshark · Wireshark-users: Re: [Wireshark-users] Request for help on traces for SMB/CIFS protocol.

[Bill Meier <wmeier@xxxxxxxxxxx>]

On 1/25/2011 8:28 AM, nilesh wrote:
> Hi,
>
> Could someone please share the packet traces for SMB/CIFS protocol? I am
> specifically looking for the traces with the packets which have multiple
> messages in single packet (AndX type of SMBs).
>
> I already have the traces for SMB/CIFS, but not able to generate the
> packets meeting the above requirement (AndX SMBs).
>
> Thanks in advance.
>
>
> P.S. Please refer section 2.4.4 (http://ubiqx.org/cifs/SMB.html#SMB.4).

How about the following on the Wireshark Wiki sample captures page ?

http://wiki.wireshark.org/SampleCaptures
#Server_Message_Block_.28SMB.29.2BAC8Common_Internet_File_System_.28CIFS.29

smbtorture.cap.gz

Also: www.pcapr.net probably has SMB captures...