This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I have the following wireshark log and was hoping for some assistance figuring out what is happening:

44120 2013-02-21 10:27:34.667718000 408.146329000 53.248.98.60 53.248.98.58 SMB 326 Trans2 Response, FIND_FIRST2, Files: . ..

44125 2013-02-21 10:27:34.776725000 408.255336000 53.248.98.58 53.248.98.60 SMB 97 Logoff AndX Request

44126 2013-02-21 10:27:34.776874000 408.255485000 53.248.98.60 53.248.98.58 SMB 97 Logoff AndX Response

44127 2013-02-21 10:27:34.776896000 408.255507000 53.248.98.58 53.248.98.60 SMB 93 Tree Disconnect Request

44128 2013-02-21 10:27:34.776976000 408.255587000 53.248.98.60 53.248.98.58 SMB 93 Tree Disconnect Response

44133 2013-02-21 10:27:34.948610000 408.427221000 53.248.98.58 53.248.98.60 TCP 54 appworxsrv > microsoft-ds [ACK] Seq=18552 Ack=39734 Win=65077 Len=0

44693 2013-02-21 10:28:08.416593000 441.895204000 53.248.98.58 53.248.98.60 TCP 54 appworxsrv > microsoft-ds [FIN, ACK] Seq=18552 Ack=39734 Win=65077 Len=0

44694 2013-02-21 10:28:08.416658000 441.895269000 53.248.98.60 53.248.98.58 TCP 60 microsoft-ds > appworxsrv [FIN, ACK] Seq=39734 Ack=18553 Win=65283 Len=0

44695 2013-02-21 10:28:08.416670000 441.895281000 53.248.98.58 53.248.98.60 TCP 54 appworxsrv > microsoft-ds [ACK] Seq=18553 Ack=39735 Win=65077 Len=0

Our server is going through an intermittent 30 second delay that is characterized between lines 44133 and 44693 and I've included some SMB traffic in hopes that someone can tell me what is happening on our server.

This is impacting our Production server and causing us lots of headache.

Any ideas?

Kevin

asked 22 Feb '13, 15:09

KPMoore's gravatar image

KPMoore
11223
accept rate: 0%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×52
×52
×9

question asked: 22 Feb '13, 15:09

question was seen: 1,572 times

last updated: 22 Feb '13, 15:09

p​o​w​e​r​e​d by O​S​Q​A