[gentoo-user] lots of wierd traffic with smb mounted share

[gentoo-user] lots of wierd traffic with smb mounted share

[Iain Buchanan]

I have autofs mounting a windows share on my network, 's'.  This is the
line from the automount file:
s -fstype=smbfs,defaults,gid=mounter,dmask=770,fmask=660,credentials=<file>  ://server1/public

However, I noticed recently there was quite a bit of traffic (5k/s)
whenever this share was mounted, when I'm not copying anything.  When I
look at ethereal, I see this sort of pattern repeated continuously:

No.     Time        Source                Destination           Protocol Info
     68 3.007178    172.16.0.52           172.16.0.1            SMB      Query Information Disk Request
     69 3.007466    172.16.0.1            172.16.0.52           SMB      Query Information Disk Response
     70 3.007496    172.16.0.52           172.16.0.1            TCP      36789 > microsoft-ds [ACK] Seq=1713 Ack=2827 Win=4356 Len=0 TSV=27437885 TSER=54117888
     71 3.007540    172.16.0.52           172.16.0.1            SMB      Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \
     72 3.007989    172.16.0.1            172.16.0.52           SMB      Trans2 Response, QUERY_PATH_INFO[Unreassembled Packet]
     73 3.008121    172.16.0.52           172.16.0.1            SMB      Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \
     74 3.008458    172.16.0.1            172.16.0.52           SMB      Trans2 Response, QUERY_PATH_INFO[Unreassembled Packet]
     75 3.008525    172.16.0.52           172.16.0.1            SMB      Trans2 Request, QUERY_PATH_INFO, Query File All Info, Path: \
     76 3.008853    172.16.0.1            172.16.0.52           SMB      Trans2 Response, QUERY_PATH_INFO[Unreassembled Packet]

I have no idea what a "Query Information Disk Request" is, so any info
would be appreciated!  I tried with and without iptables activated, and
the result is the same.

Thanks.

mount.smbfs Version 3.0.20b.
-- 
Iain Buchanan <iaindb@netspace.net.au>

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] lots of wierd traffic with smb mounted share

[Jerry McBride]

On Friday 21 October 2005 07:03, Iain Buchanan wrote:
> I have autofs mounting a windows share on my network, 's'.  This is the
> line from the automount file:
> s -fstype=smbfs,defaults,gid=mounter,dmask=770,fmask=660,credentials=<file>
>  ://server1/public
>
> However, I noticed recently there was quite a bit of traffic (5k/s)
> whenever this share was mounted, when I'm not copying anything.  When I
> look at ethereal, I see this sort of pattern repeated continuously:
>
> No.     Time        Source                Destination           Protocol
> Info 68 3.007178    172.16.0.52           172.16.0.1            SMB     
> Query Information Disk Request 69 3.007466    172.16.0.1           
> 172.16.0.52           SMB      Query Information Disk Response 70 3.007496 
>   172.16.0.52           172.16.0.1            TCP      36789 > microsoft-ds
> [ACK] Seq=1713 Ack=2827 Win=4356 Len=0 TSV=27437885 TSER=54117888 71
> 3.007540    172.16.0.52           172.16.0.1            SMB      Trans2
> Request, QUERY_PATH_INFO, Query File All Info, Path: \ 72 3.007989   
> 172.16.0.1            172.16.0.52           SMB      Trans2 Response,
> QUERY_PATH_INFO[Unreassembled Packet] 73 3.008121    172.16.0.52          
> 172.16.0.1            SMB      Trans2 Request, QUERY_PATH_INFO, Query File
> All Info, Path: \ 74 3.008458    172.16.0.1            172.16.0.52         
>  SMB      Trans2 Response, QUERY_PATH_INFO[Unreassembled Packet] 75
> 3.008525    172.16.0.52           172.16.0.1            SMB      Trans2
> Request, QUERY_PATH_INFO, Query File All Info, Path: \ 76 3.008853   
> 172.16.0.1            172.16.0.52           SMB      Trans2 Response,
> QUERY_PATH_INFO[Unreassembled Packet]
>
> I have no idea what a "Query Information Disk Request" is, so any info
> would be appreciated!  I tried with and without iptables activated, and
> the result is the same.
>
> Thanks.
>
> mount.smbfs Version 3.0.20b.
> --
> Iain Buchanan <iaindb@netspace.net.au>

Are the IP addresses within your local control? From my memory of using/ 
working with samba, you're seeing the typical smb conversation that goes on 
endlessly as servers and clients get to know each other... :')

-- 

******************************************************************************
                     Registered Linux User Number 185956
              FSF Associate Member number 2340 since 05/20/2004
             Join me in chat at #linux-users on irc.freenode.net
    Buy an Xbox for $149.00, run linux on it and Microsoft loses $150.00!
     7:10am  up 32 days, 21:35,  1 user,  load average: 0.05, 0.07, 0.08
-- 
gentoo-user@gentoo.org mailing list