Need help with SMB failure

asked 2022-05-27 17:35:23 +0000

cheath_nhbb gravatar image

updated 2022-05-28 23:07:00 +0000

Can someone take a look at my wireshark capture and help make sense of why I can't connect?

I can't upload/attach due to low karma so here's a link: updated link

Thanks in advance.

edit retag flag offensive close merge delete


The linked file appears to have been deleted.

grahamb gravatar imagegrahamb ( 2022-05-28 18:34:39 +0000 )edit

thanks for the heads up... updated the link

cheath_nhbb gravatar imagecheath_nhbb ( 2022-05-28 23:07:14 +0000 )edit

I looked at a number of TCP streams in the capture and they all show the same behaviour, the client abruptly closes the connection with a RST after receiving the SMB2 session setup response.

My assumption is that the client isn't happy with something in the response, although I don't see the server indicating any issue in it's response.

grahamb gravatar imagegrahamb ( 2022-05-30 04:18:36 +0000 )edit

so it's the client side? i was thinking that it would be on the other end... i'm having this issue when accessing workstations in another domain i don't have the issue when accessing servers in the same domain thanks for your help, btw

cheath_nhbb gravatar imagecheath_nhbb ( 2022-05-30 05:07:20 +0000 )edit

It's certainly possible that the server is generating something that upsets the clients. If it's a cross domain issue I would be looking at domain trusts.

grahamb gravatar imagegrahamb ( 2022-05-30 13:00:29 +0000 )edit