Wireshark-users: Re: [Wireshark-users] Request for help on traces for SMB/CIFS protocol.
From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Wed, 26 Jan 2011 10:55:57 -0500
On 1/25/2011 8:28 AM, nilesh wrote:
Hi,

Could someone please share the packet traces for SMB/CIFS protocol? I am
specifically looking for the traces with the packets which have multiple
messages in single packet (AndX type of SMBs).

I already have the traces for SMB/CIFS, but not able to generate the
packets meeting the above requirement (AndX SMBs).

Thanks in advance.


P.S. Please refer section 2.4.4 (http://ubiqx.org/cifs/SMB.html#SMB.4).


How about the following on the Wireshark Wiki sample captures page ?

http://wiki.wireshark.org/SampleCaptures
#Server_Message_Block_.28SMB.29.2BAC8Common_Internet_File_System_.28CIFS.29

smbtorture.cap.gz

Also: www.pcapr.net probably has SMB captures...