Hi All,
Totally new. I got one wired issue in our domain with multi site. Users got issues accessing the \domain.com\corpdata share intermittently. its freeze and noticed hapanning everywhere at the same time too.
So just install Wireshark on my laptop and start the capture and noticed having issue around 11.55 -12.05PM I have the capture saved. but try to identify with my limited knowledge but still couldn't figure this out.
ip.addr==10.1.178.56 and ip.addr==10.1.171.4 and smb2
Can someone help me or direct me. happy to share the capture. and want to know how to save only that period.
As