none
Windows 2012 R2 File server stops responding to SMB requests once a month

    Question

  • Windows 2012 R2 File server stops responding to SMB requests once a month

    No error events, no warnings

    Accessing shares just times out after 2 mins, gives no error

    Can ping and rdp to the server

    WF is off

    SEP installed version belongs to 2015

    I need some help in loking at below smb communication between client and server

    FS is 10.31.32.4

    -----------------------------------------------------------------------------------------------------

    9923 12:24:37 PM 11/05/2018 116.8755596 System 10.31.32.4 10.30.44.100 TCP TCP:Flags=...A...., SrcPort=60229, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=1729471458, Ack=3350143162, Win=4106 (scale factor 0x8) = 1051136 {TCP:4462, IPv4:595}
    9927 12:24:37 PM 11/05/2018 116.8756078 System 10.31.32.4 10.30.44.100 SMB2 SMB2:C   NEGOTIATE (0x0), GUID={0029205D-1500-E880-11E8-52593BE256A7} {SMBOverTCP:4539, TCP:4462, IPv4:595}
    10079 12:24:37 PM 11/05/2018 116.8919367 System 10.30.44.100 10.31.32.4 TCP TCP:Flags=...A...., SrcPort=Microsoft-DS(445), DstPort=60229, PayloadLen=0, Seq=3350143162, Ack=1729471570, Win=4106 (scale factor 0x8) = 1051136 {TCP:4462, IPv4:595}
    11161 12:25:07 PM 11/05/2018 146.8970263 System 10.31.32.4 10.30.44.100 TCP TCP:[Keep alive]Flags=...A...., SrcPort=60229, DstPort=Microsoft-DS(445), PayloadLen=1, Seq=1729471569 - 1729471570, Ack=3350143162, Win=4106 (scale factor 0x8) = 1051136 {TCP:4462, IPv4:595}
    11162 12:25:07 PM 11/05/2018 146.8970501 System 10.30.44.100 10.31.32.4 TCP TCP:[Keep alive ack]Flags=...A...., SrcPort=Microsoft-DS(445), DstPort=60229, PayloadLen=0, Seq=3350143162, Ack=1729471570, Win=4106 (scale factor 0x8) = 1051136 {TCP:4462, IPv4:595}

    Thursday, May 17, 2018 7:05 AM

All replies