Samba and SMB

We have a Windows 2003 box that is trying to access a Samba share on a Linux file server using SMB of course. The SMB logs of the Linux server continue to complain of a false connection coming from the 2003 server.

Does anyone know of a tool to display all SMB connections, information, and/or logs on a 2003 server?

netstat doesn't show me what I want.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

dynamik

What is your SMB signing set to? We had interoperability problems with our Macs because of that.

undomiel

The only thing I can think of is using Wireshark to monitor what is going on.

undomiel

Dynamik sparked a memory there, thanks dynamik, I remember originally having problems with SMB signing as well. Here's a part from the man file that would be helpful:

server signing (G)
This controls whether the server offers or requires the client it talks to to use SMB signing. Possible values are auto, mandatory and disabled.

When set to auto, SMB signing is offered, but not enforced. When set to mandatory, SMB signing is required and if set to disabled, SMB signing is not offered either.

Default: server signing = Disabled

Mishra

dynamik wrote:

What is your SMB signing set to? We had interoperability problems with our Macs because of that.

enablesecuritysignature 1
Requiresecurity 0

The false connections are from a known old share that doesn't exist anymore on the Linux server. The 2003 boxes seem to be trying every 4 minutes to reconnect to the same share and I'm trying to track it down.

Mishra

Maybe I can find some service explorer that can monitor lanmanserver...

sprkymrk

SMB on Windows uses ports 1024 to 5000, so maybe a netstat with a -o or -b might give some information. You might also try "net use * /delete" on the 2003 server followed by a reboot.

pwjohnston

http://www.softpedia.com/get/Network-Tools/Misc-Networking-Tools/OEConnections.shtml

Mishra

pwjohnston wrote:

http://www.softpedia.com/get/Network-Tools/Misc-Networking-Tools/OEConnections.shtml

Close! Unfortunately this only shows the SMB connections of the current user and not the whole server.