I would like to know if there is a way to list the open files in the network - if so can I also list the machine name with it asked 06 Feb '13, 08:23  gmail edited 06 Feb '13, 09:10  grahamb ♦ |
2 Answers:
Not with Wireshark. For certain network file system protocols Wireshark can display the commands to open files if they are present at the time and location of capture, but that probably isn't reflective of the current state of file use though-out the "network", particularly if the capturing machine is on a switched network and not on the actual network file servers. I think you'll need to look elsewhere for a solution to your problem. answered 06 Feb '13, 09:16 grahamb ♦ thanks - what tool is out there that you guys know of that can check who has a particular file open in a share network drive. By who I mean the ip or machine name (06 Feb '13, 19:10) gmail 1 It sounds, from your comment, as if the answer to my question above is "list, on a server machine, what client machines have what files open on it". If so, then there might be a program you can run on the server to report what clients have files open on it. What operating system is the server running, and what file protocol or protocols are being used (NFS, SMB, AFP, Netware, something else)? (06 Feb '13, 21:35) Guy Harris ♦♦ |
Please check my answer to the following question:
It will not show any 'open files', as there is no way (I know of) to do that in Wireshark. It will however list the files that have been accessed on an SMB share. Beware that this may not work in every environment! Regards answered 07 Feb '13, 16:32  Kurt Knochner ♦ |
Do you mean "list, on a client machine, what files it has open on various file servers" or "list, on a server machine, what client machines have what files open on it"? (Note that the machine on your desk could be a "server" if it's exporting NFS/SMB/AFP/etc. files.) In either case, Wireshark isn't the right tool, as grahamb notes.