This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I have a large capture (185mg)of an excel file transfer across a wan connection from a windows file share to a windows laptop. the file takes a long time to transfer. It's using SMB2. After the data is transferred I see thousands of NBSS Continuation Messages. Trying to see if this is normal behavier. I'm not sure how NBSS is supposed to work

asked 10 Dec '14, 10:38

johansek's gravatar image

johansek
11112
accept rate: 0%

edited 29 Mar '15, 19:08

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


SMB/SMB2 are designed for local file transfers. They are inefficient for transfers across a WAN. They are sensitive to latency. The higher the round-trip latency, the longer the transfer is going to take. FTP is a far more efficient protocol for transfers over a WAN, so you might try transferring the same file via FTP and see how long it takes. If the FTP transfer is quicker, the time difference is simply due to the difference in how the protocols operate. If the FTP transfer takes as long as the SMB2 transfer, then something else is going on.

If possible, post an actual capture file (assuming it does not contain confidential date) to Cloudshark or some other publicly accessible place and post a link to the file.

permanent link

answered 10 Dec '14, 11:33

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×752
×52
×27

question asked: 10 Dec '14, 10:38

question was seen: 1,836 times

last updated: 29 Mar '15, 19:08

p​o​w​e​r​e​d by O​S​Q​A