First, I am completely ignorant of all things wireshark, so please forgive me. I have a windows 2003 that is slow when transferring files. I tested out another windows 2003 server that doesn't exhibit the same issue. Here is one difference I found in wirehsark that may be the cause, but I really have no idea if it is or how to fix. Slow Server: 163 0.000185 192.168.0.4 192.168.0.154 SMB 105 Write AndX Response, FID: 0x800e, 16580 bytes Fast Server: 1974 0.000000 192.168.0.159 192.168.0.154 SMB 105 Write AndX Response, FID: 0x4000, 65536 bytes There are tons of these entries (I assume that thats the file being written over the network. The different of course is the byte size of 16580 vs 65536. Thanks in advance and let me know if you need more information. asked 05 Jul '11, 12:58  thebigdog123 |
One Answer:
Found my own answer! SMB signing was enabled, causing the max buffer to be ignored and reset to the default of 16580. I disabled SMB signing, and the throughput virtually quadrupled! answered 06 Jul '11, 05:04 thebigdog123 |
