Wireshark-users: [Wireshark-users] SMB Diagnostics w/ Wireshark

From: "St. Onge,Adam" <ASTONGE@xxxxxxxxxxxxx>
Date: Fri, 20 Nov 2009 07:28:27 -0500

I was wondering if anyone has any training resources on troubleshooting SMB performance with Wireshark?

I have a situation where the same user from the same workstation accesses the same file on two different NAS devices, and sees much worse performance on one.  I took a look at the trace and see some differences, specifically in the size of the READ ANDX buffers, where one uses a 16K buffer and the other uses a 64K buffer, but I dont see where those sizes are negotiated with the NAS device.

Any help would be appreciated.

Thanks,
Adam

 

 

==============================================================================
This communication, including attachments, is confidential, may be subject to legal privileges, and is intended for the sole use of the addressee. Any use, duplication, disclosure or dissemination of this communication, other than by the addressee, is prohibited. If you have received this communication in error, please notify the sender immediately and delete or destroy this communication and all copies.