This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

NFSv4 network capture with all possible operations

0

I'm working on NFSv3/4 network utility and for testing purposes I am looking for NFSv4 captures containing all possible NFSv4 operations.

I found a "Fairly complete trace of all NFS v3 packet types" here http://wiki.wireshark.org/SampleCaptures#NFS_Protocol_Family

I googled a lot but I can not find something similar for NFSv4.

Yes, off course most of NFSv4 operations I was able to easily reproduce by myself.

But I don't know how too make these: CREATE, LINK, LOCK, LOCKT, LOCKU, NVERIFY, OPENATTR, OPEN_DOWNGRADE, READ, READLINK, SECINFO, VERIFY, RELEASE_LOCKOWNER, GET_DIR_DELEGATION.

Maybe someone can share with me some kind of "NFSv4_all_operations_capture.pcap" or tell me the way to reproduce them?

asked 30 Sep '14, 08:02

Alexey%20Costroma's gravatar image

Alexey Costroma
16114
accept rate: 0%


2 Answers:

1

The following is a list of nfsv4 opcodes found in nfs captures posted to Wireshark bugzilla.

You can use the "Custom Search" function under the "Not so simple search" tab of the bugzilla search screen to find the bug to which the file is attached. (Don't include the initial leading "digits-" in the filename being searched for".

Note that you must select all the fields under resolution for the search to succeed.

392-nfs4.pcap.gz:
   ACCESS
   CLOSE
   COMMIT
   CREATE
   DELEGRETURN
   GETATTR
   GETFH
   LINK
   LOOKUP
   OPEN
   OPEN_CONFIRM
   PUTFH
   READ
   READDIR
   READLINK
   REMOVE
   RENAME
   SAVEFH
   SETATTR
   WRITE

716-NFSv4_SETATTR.cap: ACCESS GETATTR GETFH LOOKUP NVERIFY PUTFH SETATTR

740-v4.snoop: ACCESS GETATTR GETFH LOOKUP NVERIFY PUTFH SETATTR

743-NFSv4.cap: ACCESS GETATTR GETFH LOOKUP NVERIFY PUTFH SETATTR

1173-nfsv4_getattr_fslocations.trc: GETATTR LOOKUP PUTFH

1438-nfs4.1sample.pcap: ACCESS GETATTR GETFH LOOKUP PUTFH PUTROOTFH READDIR REMOVE EXCHANGE_ID CREATE_SESSION SEQUENCE

2269-nfsv4_getattr_req_response.trc: GETATTR PUTROOTFH

4289-reclaim_complete.cap: ACCESS GETATTR GETFH LOOKUP OPEN PUTFH PUTROOTFH RESTOREFH SAVEFH SETATTR EXCHANGE_ID CREATE_SESSION DESTROY_SESSION SEQUENCE RECLAIM_COMPLETE

4713-CelerraNFSv4FH.pcap: ACCESS CLOSE GETATTR GETFH LOCK LOCKU LOOKUP OPEN OPEN_CONFIRM PUTFH PUTROOTFH READ RESTOREFH SAVEFH SETCLIENTID SETCLIENTID_CONFIRM

4743-NFSv4–Reads-and-Writes.cap.gz: CLOSE COMMIT GETATTR GETFH LOOKUP OPEN PUTFH READ RESTOREFH SAVEFH SETATTR WRITE

5153-setclientid-bug-in-3079.cap.gz: ACCESS GETATTR GETFH LOOKUP LOOKUPP NVERIFY PUTFH PUTROOTFH READDIR RESTOREFH SAVEFH SECINFO SETCLIENTID SETCLIENTID_CONFIRM

5741-test_find4.cap: ACCESS CLOSE COMMIT GETATTR GETFH LOOKUP OPEN OPEN_CONFIRM PUTFH READ READDIR RESTOREFH SAVEFH SETATTR WRITE

8245-pnfs.pcap: GETATTR PUTFH LAYOUTCOMMIT LAYOUTGET SEQUENCE

8717-trim-lone-packet-obfuscated: GETATTR GETFH OPEN PUTFH

8720-trim-lone-packet-obfuscated-v2.pcap: GETATTR GETFH OPEN PUTFH

9711-free-stateid-and-open-why-no-deleg-example.pcap: CLOSE GETFH LOOKUP OPEN PUTROOTFH FREE_STATEID SEQUENCE

10451-fslocation.pcap: ACCESS CLOSE COMMIT CREATE GETATTR GETFH LINK LOCK LOCKT LOCKU LOOKUP LOOKUPP NVERIFY OPEN OPEN_CONFIRM OPEN_DOWNGRADE PUTFH PUTPUBFH PUTROOTFH READ READDIR READLINK REMOVE RENAME RENEW RESTOREFH SAVEFH SECINFO SETATTR SETCLIENTID SETCLIENTID_CONFIRM VERIFY WRITE RELEASE_LOCKOWNER

10578-acls.cap: GETATTR PUTFH

10591-cb_sequence.pcap: EXCHANGE_ID CREATE_SESSION

10595-open-wants.pcap: GETFH LOOKUP OPEN PUTROOTFH SEQUENCE

11068-wireshark_nfs4bug_example.trc: ACCESS CLOSE GETATTR GETFH LOOKUP OPEN PUTFH PUTROOTFH READDIR REMOVE RENAME RENEW RESTOREFH SAVEFH SETATTR SETCLIENTID SETCLIENTID_CONFIRM WRITE

answered 01 Oct ‘14, 10:18

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850
accept rate: 17%

That’s great! Thank you!

(02 Oct ‘14, 00:03) Alexey Costroma

0

Try pcapr.net. There are a number of NFS capture files there. Most of them are v2 or v3, but one of them is specifically listed as being v4.

answered 30 Sep '14, 10:13

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

I've already tried (( Well I've found several small NFSv4 traces, but there was only NVERIFY and some other operations that I already have.

Unfortunatelly they don't contain CREATE, LINK, LOCK, LOCKT, LOCKU, OPENATTR, OPEN_DOWNGRADE, READ, READLINK, SECINFO, VERIFY, RELEASE_LOCKOWNER, GET_DIR_DELEGATION

(30 Sep '14, 23:30) Alexey Costroma