Help please. The Situation: Eight identical Dell computers (1 yr old) with Windows 7 Pro SP1 connected via an HP switch (all wired) and sharing via a homegroup. There is one shared folder on Computer 'S' containing a commonly queried file, no person sits at or works on Computer 'S', and the query software prevents any 2 people from querying the file at the same time (ie. no overlapping queries). The Problem: If no-one queries that file from their computer for 15 seconds or more, then the next person to query it from any computer will receive their results back fast (<2 sec), and the Wireshark capture indicates that most packets are like: TCP 1514 [TCP segment of a reassembled PDU] However, in the 15 seconds after someone queries the file, one of two things happens: 1) If the same person (same computer) re-queries the database (with the same or different query) inside 15 seconds, they will get fast results again (<2 sec) with TCP and 1514 Lengths just as above. But... 2) If anyone else (a second person at a second computer) queries the database in less than 15 seconds, they will get slow results (>20 seconds), and Wireshark captures frame pairs like: SMB2 191 Read Request Len:1024 Off:24194048 File: S Drive\database.xyz SMB2 1182 Read Response If this second person sits and waits for 15 seconds instead of placing the query right away, then they will again have a fast response (<2 sec) and will have frames again like "TCP 1514 [TCP segment of a reassembled PDU]". Unfortunately, making each person wait 15 seconds since the last person's query is not feasible. We need to place queries every 5-10 seconds, and we need them to all be fast. As things are now, if we keep placing queries every 5-10 seconds apart, then the 15 seconds of wait time never passes, so all the queries take >20 seconds. The problem is like a swinging "bridge"... if it's pointed to your computer, you get fast queries. But unless anyone else waits 15 seconds after your last query for the bridge to "free up", they will get a slow response. (Again, 2 overlapping queries is not possible; all queries are place sequentially.) I suspect that Windows 7 is enforcing a policy that selects TCP via IPv6 for the first query (fast), and then it selects SMB2 and NetBios (slow) for any other subsequent queries, unless 15 seconds is allowed to lapse from the end of the last query (either TCP or SMB2); the 15 seconds seems to allow it to go back to TCP. I've searched for documentation of such a Windows behavior, but can't find it, nor have I found any way to affect this behavior. But I'm pretty clueless, so I'd really appreciate any ideas you all have. Thank you for your consideration. I'd be happy to include more details from the Wireshark captures if it would be helpful. Thank you very much. asked 15 Feb '17, 15:27  Hitched01 |
One Answer:
Hello Hitched01 Your question and the brief traces reveal multiple problems. Application Design You have a database application and place a file on an SMB share. Multiple clients compete for access to the file. Both file server and application have to make sure, that the file contains valid data at all times. SMB offers a feature called "opportunistic locking". Client A can send a Lock Request to the server to signal that he wants exclusive access to a certain region. If client B is holding this lock the server has to send a Lock Request to client B. Client A can only continue, once client B releases the lock. How fast that happens depends on client B. There are situations where the application has to be in a proper state before the lock can be released, like flushing buffers. Unfortunately this opportunistic locking only works for a small number of clients: Lock management can put a tremendous load on the server. It would be advisable to use a database for this application. "Database" would be something like MS-SQL, MySQL or any similar database that can be reached through a dedicated network port. SQLITE databases do not count, as they are implemented as a file and you have the whole locking game going on. Server Performance / Application Behavior Your "slow trace" shows that the client is sending a large number of requests, each 1024 byte at a time. Each request is answered within 1 millisecond. But 15.000 times 1 milliseconds still results in a response time of 15 seconds. The "fast trace" shows read requests of 24 kByte, where each request is served within 1 millisecond. I wonder if the "fast trace" shows large block sizes as well. In theory, this should complete within 1 second. Image you host a party and want order pizza for you and your guests. Within the "slow trace" you order one slice at a time. The next order is only placed after the first slice has been consumed. No wonder it takes all night long until everybody is fed. The "fast trace" orders 24 slices at a time. Depending on the number of guests it might still take some time to feed everybody. At least the guests stop raiding your kitchen ... Operating System Your question mentions that all systems run Windows 7, which is a workstation OS. Workstations are not optimized to run as file servers, while Windows server editions are not optimized for desktop applications. If all the tuning and analysis does not help, you might want to consider a test with a Windows Server version. Why the small block sizes? There are a few possibilities. One point is definitely the application. You might want to talk to your vendor or developer and have them check their code. Another option is the server. Since the server uses SMB2 the client needs credits to ask run I/O operations. My first check would be, if the client has sufficient credits. I tried to put a few hints into the blog entry Trace File Case Files: SMB2 Performance which Jasper published on his excellent web site blog.packet-foo.com. And then? For a full analysis we need a trace take at the server side. No screen shots or text-listings please. Good hunting. answered 17 Feb '17, 12:07  packethunter |
This probably is not your root cause but a packet trace would prove it either way. You will likely have better luck if you post a sanitized trace which shows the two cases: fast and slow, for comparison.
Bob, thank you for taking a look. I will do as you suggest.
Below are the beginnings and endings of traces for a Slow (>20 sec) query, and then a Fast one (<2 sec). Intervening lines basically repeat those immediately before. When a query is placed, the querying program changes the status of a lockfile (LockFile.Stm) to locked, and then queries Database.xyz. When the query results are all returned, the LockFile.Stm file is unlocked. Both of the queries below were placed on the same machine, same query. The slow query was placed within 15 seconds of another computer completing a query; the fast query was placed more than 15 seconds after completion of a prior query by another computer. Thank you for taking a look at this issue. Please let me know if you need more info. I'm sorry if this doesn't look readable when pasted on-site (but it should look readable in notepad, etc). I appreciate your expertise.
Slow Query:
0 192.168.1.16 192.168.1.10 BJNP 174 Scanner Command: Scan Job Details
0.00371 192.168.1.10 192.168.1.16 BJNP 110 Scanner Response: Scan Job Details
0.602226 HewlettP_76:e8:cd Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/78:48:59:76:e8:bc Cost = 0 Port = 0x8010 1.491427 fe80::216c:a17e:e377:3737 ff02::1:ff2f:d1a6 ICMPv6 86 Neighbor Solicitation for fe80::8013:e10e:132f:d1a6 from f8:bc:12:a3:e7:69
1.492367 fe80::8013:e10e:132f:d1a6 ff02::1:ff77:3737 ICMPv6 86 Neighbor Solicitation for fe80::216c:a17e:e377:3737 from 48:4d:7e:d2:d6:03
1.492546 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 310 Create Request File: LockFile.Stm
1.492697 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 ICMPv6 86 Neighbor Advertisement fe80::216c:a17e:e377:3737 (sol, ovr) is at f8:bc:12:a3:e7:69
1.493115 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 ICMPv6 86 Neighbor Advertisement fe80::8013:e10e:132f:d1a6 (sol, ovr) is at 48:4d:7e:d2:d6:03
1.493413 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: LockFile.Stm
1.494088 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
1.494831 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
1.495464 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 294 Create Request File:
1.49629 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: [unknown]
1.497309 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request File: [unknown] SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
1.498111 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
1.49845 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: [unknown]
1.499116 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
1.500463 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 366 Create Request File: LockFile.Stm
1.501508 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 151 Create Response, Error: STATUS_PENDING
1.502607 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 406 Create Response File: LockFile.Stm
1.502957 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=1057 Ack=1348 Win=63453 Len=0
1.505197 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
1.5061 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
1.507581 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
1.508448 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
1.509642 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
1.510654 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
1.511788 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
1.512676 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
1.513118 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
1.514037 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
1.514532 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
1.51542 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
1.515856 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 342 Create Request File: LockFile.Stm
1.51673 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 350 Create Response File: LockFile.Stm
1.516843 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 214 SetInfo Request FILE_INFO/SMB2_FILE_BASIC_INFO File: LockFile.Stm
1.517631 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 144 SetInfo Response
1.517717 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
1.518401 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
1.522844 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 210 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: Database.xyz
1.523635 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 280 Find Response
1.52397 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 210 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: Database.xyz
1.524838 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 280 Find Response
1.525012 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 326 Create Request File: Database.xyz
1.525798 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: Database.xyz
1.525926 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: Database.xyz
1.526596 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
1.526909 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 382 Create Request File: Database.xyz
1.535321 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 151 Create Response, Error: STATUS_PENDING
1.535757 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 406 Create Response File: Database.xyz
1.535796 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3225 Ack=4179 Win=63607 Len=0
1.536055 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:0
1.536532 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
1.536532 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
1.536575 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3342 Ack=7059 Win=64800 Len=0
1.536774 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
1.536936 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.537533 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.537602 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.53819 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.538257 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.53879 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.538931 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 342 Create Request File: Database.xyz-journal
1.539631 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 151 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
1.539777 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 334 Create Request File: Database.xyz-wal
1.540467 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 151 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
1.540564 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:0
1.541231 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.541328 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:5120
1.542038 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.542171 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:6144
1.542883 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.54339 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.544088 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.544529 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.545244 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.545788 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.546512 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.546793 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.547494 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.548254 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:16 Off:24
1.549053 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 174 Read Response
1.550448 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.551241 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.552581 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.553376 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.553791 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.554563 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.554922 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
1.555699 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
1.556667 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:16 Off:24
1.557505 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 174 Read Response
1.558482 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:1024
1.559341 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.55992 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:14023680
1.560761 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.561336 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:159744
1.562129 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.562593 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:9216
1.563352 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.563743 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:10240
1.564546 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.565323 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:11264
1.566155 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.56668 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:13312
1.56748 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.56792 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:14336
1.568749 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.569348 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:15360
1.570221 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
1.570818 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:16384
1.571659 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
These lines repeat...
29.293982 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:37540864
29.294546 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
29.294806 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:37543936
29.295317 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
29.295429 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:37547008
29.295939 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
29.296068 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:35646464
29.29659 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
29.296717 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:37550080
29.297226 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
29.297351 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:1024 Off:37552128
29.297865 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1182 Read Response
29.298043 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 190 Lock Request
29.298514 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 146 Lock Response
29.301568 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 310 Create Request File: LockFile.Stm
29.302166 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: LockFile.Stm
29.30244 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
29.30286 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
29.303088 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 294 Create Request File:
29.303566 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: [unknown]
29.303846 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request File: [unknown] SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
29.304357 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
29.304484 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: [unknown]
29.304871 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
29.3054 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 366 Create Request File: LockFile.Stm
29.306406 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 406 Create Response File: LockFile.Stm
29.307448 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
29.308262 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
29.308961 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
29.309661 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
29.311094 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
29.311869 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
29.312917 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
29.313896 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
29.314766 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
29.315715 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
29.316174 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
29.317088 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
29.317726 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 342 Create Request File: LockFile.Stm
29.318611 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 350 Create Response File: LockFile.Stm
29.318841 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 214 SetInfo Request FILE_INFO/SMB2_FILE_BASIC_INFO File: LockFile.Stm
29.319757 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 144 SetInfo Response
29.319979 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
29.320639 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
29.528953 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3947161 Ack=37317865 Win=63744 Len=0
29.571593 fe80::8013:e10e:132f:d1a6 ff02::1:2 DHCPv6 147 Solicit XID: 0x7d7f2d CID: 000100011fbdca93484d7ed2d603
29.790336 192.168.1.1 255.255.255.255 UDP 215 32771 → 7423 Len=173
30.601115 HewlettP_76:e8:cd Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/78:48:59:76:e8:bc Cost = 0 Port = 0x8010 32.073016 192.168.1.16 192.168.1.10 BJNP 174 Scanner Command: Scan Job Details
32.078859 192.168.1.10 192.168.1.16 BJNP 110 Scanner Response: Scan Job Details
32.601157 HewlettP_76:e8:cd Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/78:48:59:76:e8:bc Cost = 0 Port = 0x8010 32.664384 Dell_a3:e7:69 Canon_b5:d0:c5 ARP 42 Who has 192.168.1.10? Tell 192.168.1.16
32.665461 Canon_b5:d0:c5 Dell_a3:e7:69 ARP 60 192.168.1.10 is at 88:87:17:b5:d0:c5
End Slow Query*
Fast Query:
60.13671 192.168.1.16 192.168.1.10 BJNP 174 Scanner Command: Scan Job Details
60.140568 192.168.1.10 192.168.1.16 BJNP 110 Scanner Response: Scan Job Details
60.389343 192.168.1.1 255.255.255.255 UDP 215 32771 → 7423 Len=173
60.600059 HewlettP_76:e8:cd Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/78:48:59:76:e8:bc Cost = 0 Port = 0x8010 61.152912 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 310 Create Request File: LockFile.Stm
61.153778 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: LockFile.Stm
61.154021 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
61.154699 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
61.154987 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 294 Create Request File:
61.155784 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: [unknown]
61.155971 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request File: [unknown] SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
61.156715 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
61.15685 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: [unknown]
61.15752 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
61.157905 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 366 Create Request File: LockFile.Stm
61.159091 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 406 Create Response File: LockFile.Stm
61.159495 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
61.160383 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
61.160633 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
61.161501 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
61.161759 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
61.162623 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
61.16309 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
61.163949 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
61.16427 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
61.165148 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
61.166771 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
61.167731 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
61.168023 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 342 Create Request File: LockFile.Stm
61.168894 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 350 Create Response File: LockFile.Stm
61.169256 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 214 SetInfo Request FILE_INFO/SMB2_FILE_BASIC_INFO File: LockFile.Stm
61.170151 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 144 SetInfo Response
61.170609 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
61.171356 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
61.176831 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 210 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: Database.xyz
61.177721 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 280 Find Response
61.178054 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 210 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: Database.xyz
61.178909 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 280 Find Response
61.179067 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 326 Create Request File: Database.xyz
61.179828 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 318 Create Response File: Database.xyz
61.180126 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: Database.xyz
61.180785 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
61.181175 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 382 Create Request File: Database.xyz
61.182321 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 406 Create Response File: File:
61.182485 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:0 File: F
61.183222 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.183223 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.183224 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
61.183294 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3950686 Ack=37326325 Win=64800 Len=0
61.183523 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 342 Create Request File: Database.xyz-journal
61.18405 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 151 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
61.184211 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 334 Create Request File: Database.xyz-wal
61.184915 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 151 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND
61.185513 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:4096 File: Database.xyz
61.18619 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.186191 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.186192 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
61.186248 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3951331 Ack=37330659 Win=64800 Len=0
61.188014 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:14020608 File: Database.xyz
61.188704 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.188709 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.188712 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
61.18892 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3951448 Ack=37334839 Win=64800 Len=0
61.188984 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:159744 File: Database.xyz
61.189547 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.189548 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.189622 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3951565 Ack=37337719 Win=64800 Len=0
61.189856 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
61.19008 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:8192 File: Database.xyz
61.190731 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.190732 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.190733 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
61.190872 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3951682 Ack=37343199 Win=64800 Len=0
61.191053 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:12288 File: Database.xyz
61.191064 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:24576 Off:16384 File: Database.xyz
61.191438 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 74 445 → 49278 [ACK] Seq=37343199 Ack=3951916 Win=64566 Len=0
61.19178 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191781 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191782 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
61.191784 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191784 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191785 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191786 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191786 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191787 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191787 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191788 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191788 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191789 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191789 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.19179 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.191925 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3951916 Ack=37347379 Win=64800 Len=0
61.192037 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.192038 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.192039 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.19204 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.19204 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.192041 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 254 Read Response
61.192041 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:24576 Off:40960 File: Database.xyz
61.192083 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3952033 Ack=37371859 Win=64800 Len=0
61.192907 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.192918 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.192918 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.192919 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.19292 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.19292 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.192921 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.193066 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=3952033 Ack=37382119 Win=64800 Len=0
61.193113 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.193123 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.193124 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.193125 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
61.193126 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
These lines repeat...
63.209322 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
63.209323 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
63.209375 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=4190830 Ack=75265403 Win=64800 Len=0
63.209566 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
63.210615 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:37076992 File: Database.xyz
63.211195 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
63.211411 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
63.211411 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
63.211443 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=4190947 Ack=75270883 Win=64800 Len=0
63.211819 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 191 Read Request Len:4096 Off:37376000 File: Database.xyz
63.212266 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
63.212473 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 TCP 1514 [TCP segment of a reassembled PDU]
63.212474 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 1374 Read Response
63.2125 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=4191064 Ack=75275063 Win=64800 Len=0
63.217061 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 286 Create Request File: LockFile.Stm
63.217894 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 262 Create Response File: LockFile.Stm
63.218046 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
63.21868 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
63.218977 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
63.219914 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
63.220469 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
63.221329 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
63.221542 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
63.22238 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
63.222563 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
63.223402 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
63.223578 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
63.224401 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
63.22459 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
63.225425 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
63.225601 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 198 Find Request SMB2_FIND_BOTH_DIRECTORY_INFO Pattern: LockFile.Stm
63.226434 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 268 Find Response
63.226557 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 342 Create Request File: LockFile.Stm
63.227364 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 350 Create Response File: LockFile.Stm
63.227434 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 214 SetInfo Request FILE_INFO/SMB2_FILE_BASIC_INFO File: LockFile.Stm
63.228205 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 144 SetInfo Response
63.22826 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 SMB2 166 Close Request File: LockFile.Stm
63.228915 fe80::8013:e10e:132f:d1a6 fe80::216c:a17e:e377:3737 SMB2 202 Close Response
63.442527 fe80::216c:a17e:e377:3737 fe80::8013:e10e:132f:d1a6 TCP 74 49278 → 445 [ACK] Seq=4192736 Ack=75277211 Win=64132 Len=0
63.449145 192.168.1.1 255.255.255.255 UDP 215 32771 → 7423 Len=173
64.145058 192.168.1.16 192.168.1.10 BJNP 174 Scanner Command: Scan Job Details
64.151115 192.168.1.10 192.168.1.16 BJNP 110 Scanner Response: Scan Job Details
End Fast Query*