This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Server 2003 file listing problem Part 2

0

Hi,

I have the following wireshark log and was hoping for some assistance figuring out what is happening:

44120 2013-02-21 10:27:34.667718000 408.146329000 53.248.98.60 53.248.98.58 SMB 326 Trans2 Response, FIND_FIRST2, Files: . ..

44125 2013-02-21 10:27:34.776725000 408.255336000 53.248.98.58 53.248.98.60 SMB 97 Logoff AndX Request

44126 2013-02-21 10:27:34.776874000 408.255485000 53.248.98.60 53.248.98.58 SMB 97 Logoff AndX Response

44127 2013-02-21 10:27:34.776896000 408.255507000 53.248.98.58 53.248.98.60 SMB 93 Tree Disconnect Request

44128 2013-02-21 10:27:34.776976000 408.255587000 53.248.98.60 53.248.98.58 SMB 93 Tree Disconnect Response

44133 2013-02-21 10:27:34.948610000 408.427221000 53.248.98.58 53.248.98.60 TCP 54 appworxsrv > microsoft-ds [ACK] Seq=18552 Ack=39734 Win=65077 Len=0

44693 2013-02-21 10:28:08.416593000 441.895204000 53.248.98.58 53.248.98.60 TCP 54 appworxsrv > microsoft-ds [FIN, ACK] Seq=18552 Ack=39734 Win=65077 Len=0

44694 2013-02-21 10:28:08.416658000 441.895269000 53.248.98.60 53.248.98.58 TCP 60 microsoft-ds > appworxsrv [FIN, ACK] Seq=39734 Ack=18553 Win=65283 Len=0

44695 2013-02-21 10:28:08.416670000 441.895281000 53.248.98.58 53.248.98.60 TCP 54 appworxsrv > microsoft-ds [ACK] Seq=18553 Ack=39735 Win=65077 Len=0

Our server is going through an intermittent 30 second delay that is characterized between lines 44133 and 44693 and I've included some SMB traffic in hopes that someone can tell me what is happening on our server.

This is impacting our Production server and causing us lots of headache.

Any ideas?

Kevin

asked 22 Feb '13, 15:09

KPMoore's gravatar image

KPMoore
11223
accept rate: 0%