Wireshark-users: [Wireshark-users] SMB Question

From: "St Onge,Adam" <ASTONGE@xxxxxxxxxxxxx>
Date: Mon, 14 Apr 2008 21:24:36 -0400

I am having a problem with slow response over an oc3 wan link using Microsoft office documents, specifically excel documents. The users are attempting to open roughly a 100kb file and takes approx 90 seconds to open.  I sniffed the traffic and have been combing through the frames with Wireshark but I see a confusing pattern. The workstation frequently attempts “NT Create Andx Request” and the server then immediately returns with “Error: Status_Access_Denied”.  This pattern repeats over and over again during this conversation and I suspect it may have something to do with the slow response these users are experiencing. I have spent a lot of time on google trying to determine this and keep coming up empty handed…

 

Does anyone have any insight as to what may be going on here?

 

Thanks,

 

Adam

 

==============================================================================
This communication, together with any attachments hereto or links contained herein, is for the sole use of the intended recipient(s) and may contain information that is confidential or legally protected. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, dissemination, distribution or use of this communication is STRICTLY PROHIBITED.  If you have received this communication in error, please notify the sender immediately by return e-mail message and delete the original and all copies of the communication, along with any attachments hereto or links herein, from your system.

==============================================================================
The Travelers e-mail system made this annotation on 04/14/08, 21:24:38.