Samba and SMB
We have a Windows 2003 box that is trying to access a Samba share on a Linux file server using SMB of course. The SMB logs of the Linux server continue to complain of a false connection coming from the 2003 server.
Does anyone know of a tool to display all SMB connections, information, and/or logs on a 2003 server?
netstat doesn't show me what I want.
Does anyone know of a tool to display all SMB connections, information, and/or logs on a 2003 server?
netstat doesn't show me what I want.
Comments
-
dynamik
Banned Posts: 12,312 ■■■■■■■■■□
What is your SMB signing set to? We had interoperability problems with our Macs because of that. -
undomiel
Member Posts: 2,818
The only thing I can think of is using Wireshark to monitor what is going on.Jumping on the IT blogging band wagon -- http://www.jefferyland.com/ -
undomiel
Member Posts: 2,818
Dynamik sparked a memory there, thanks dynamik, I remember originally having problems with SMB signing as well. Here's a part from the man file that would be helpful:
server signing (G)
This controls whether the server offers or requires the client it talks to to use SMB signing. Possible values are auto, mandatory and disabled.
When set to auto, SMB signing is offered, but not enforced. When set to mandatory, SMB signing is required and if set to disabled, SMB signing is not offered either.
Default: server signing = DisabledJumping on the IT blogging band wagon -- http://www.jefferyland.com/ -
Mishra
Member Posts: 2,468 ■■■■□□□□□□
dynamik wrote:What is your SMB signing set to? We had interoperability problems with our Macs because of that.
enablesecuritysignature 1
Requiresecurity 0
The false connections are from a known old share that doesn't exist anymore on the Linux server. The 2003 boxes seem to be trying every 4 minutes to reconnect to the same share and I'm trying to track it down. -
Mishra
Member Posts: 2,468 ■■■■□□□□□□
Maybe I can find some service explorer that can monitor lanmanserver...
-
sprkymrk
Member Posts: 4,884 ■■■□□□□□□□
SMB on Windows uses ports 1024 to 5000, so maybe a netstat with a -o or -b might give some information. You might also try "net use * /delete" on the 2003 server followed by a reboot.All things are possible, only believe. -
Mishra
Member Posts: 2,468 ■■■■□□□□□□
pwjohnston wrote:
Close! Unfortunately this only shows the SMB connections of the current user and not the whole server.
