Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
Performance
Vision
© Performance Vision 2015
SMB / CIFS TRANSACTIONS
PERFORMANCE ANALYSIS
Leader in
Network &
Application
...
© Performance Vision 2015
SMB / CIFS PERFORMANCE ANALYSIS
 1. Connect and Browse Files
 2. Login Authorization Failure
...
© Performance Vision 2015
SMB / CIFS PERFORMANCE ANALYSIS
 1. Connect and Browse Files
 2. Login Authorization Failure
...
© Performance Vision 2015
WHAT IS SMB USED FOR?
 Open
 Close
 Read
 Write
 Rename
 Move
 …
 Through a Named Pipe
m...
© Performance Vision 2015
SMB IS WIDELY SUPPORTED
SMB
Windows
Linux
OSX
BSD
SolarisSamba
EMC
NetApp
Many
others…
© Performance Vision 2015
SMB: A LONG HISTORY
IBM
PC- DOS
1983 1988
Lan Manager
1992
Samba
1992
Windows
for Workgroups
199...
© Performance Vision 2015
SMB/CIFS: BUSINESS CRITICAL ELEMENTS
Today the SMB Protocol Is widely used by
both Users & Appli...
© Performance Vision 2015
SMB/CIFS ANALYSIS: USER BENEFITS
Monitor SMB/CIFS Performance
Identify Slow Transactions
Correla...
© Performance Vision 2015
IN-DEPTH SMB/CIFS PERFORMANCE ANALYSIS
CIFS/SMB in APS
Supported CIFS/SMB versions
 SMB 1.0
 S...
© Performance Vision 2015
SMB / CIFS OVERVIEW
Overview of SMB / CIFS Commands
© Performance Vision 2015
OVERVIEW OF SMB / CIFS COMMANDS
Display CIFS Overview per Command type:
 Number of Queries
 Nu...
© Performance Vision 2015
SMB / CIFS PERFORMANCE
Performance of SMB / CIFS Queries over Time
© Performance Vision 2015
PERFORMANCE
OF SMB / CIFS QUERIES OVER TIME
Display SMB / CIFS Performance metrics over time:
 ...
© Performance Vision 2015
SMB / CIFS CLIENTS
SMB / CIFS Most Active Clients
© Performance Vision 2015
SMB / CIFS MOST ACTIVE CLIENTS
Display SMB / CIFS metrics for the most active clients:
 Client ...
© Performance Vision 2015
SMB / CIFS SERVERS
SMB / CIFS Most Active Servers
© Performance Vision 2015
SMB / CIFS MOST ACTIVE SERVERS
Display SMB / CIFS metrics for the most active servers:
 Server ...
© Performance Vision 2015
SMB / CIFS FILES
SMB / CIFS Most Active Files
© Performance Vision 2015
SMB / CIFS TOP FILES
Display queries aggregated by Files:
 File Path
 Number of Queries, Error...
© Performance Vision 2015
SMB / CIFS TREES
SMB / CIFS Most Active Trees
© Performance Vision 2015
SMB / CIFS TOP TREES
Display queries aggregated by Trees:
 Tree Path
 Number of Queries, Error...
© Performance Vision 2015
DIFFERENCE BETWEEN TREE AND FILE
 WINSHARE  DATA
 WINSHARE  USR
Tree (Mount Point) File
 Private...
© Performance Vision 2015
SMB / CIFS USERS
SMB / CIFS Most Active Users
© Performance Vision 2015
SMB / CIFS TOP USERS
Display queries aggregated by Users:
 Username
 Number of Queries, Errors...
© Performance Vision 2015
SMB / CIFS QUERIES
List of SMB / CIFS Queries
© Performance Vision 2015
SMB / CIFS QUERIES
Available SMB / CIFS Data
 Command, Subcommand and Status
 File ID and Path...
© Performance Vision 2015
SMB / CIFS RAW DATA
Details of all SMB / CIFS Transactions
© Performance Vision 2015
SMB / CIFS RAW DATA
TRUE ROOT CAUSE ANALYSIS
SMB / CIFS transactions without any grouping
 Usef...
© Performance Vision 2015
SMB / CIFS DEDICATED FILTERS
Dedicated SMB / CIFS filters:
Refine search for specific issues
Sea...
© Performance Vision 2015
CORRELATION BETWEEN
NETWORK ISSUES & SMB / CIFS TRANSACTIONS
SMB / CIFS
© Performance Vision 2015
SMB / CIFS PERFORMANCE ANALYSIS
 1. Connect and Browse Files
 2. Login Authorization Failure
...
© Performance Vision 2015
SMB VERSIONS & DIALECTS
SMB 1 SMB 2
SMB 2.0
SMB 2.1
SMB 3.0
Protocol Versions
Protocol Dialects
...
© Performance Vision 2015
SMB 2: MAJOR IMPROVEMENTS OVER SMB 1
SMB 1 SMB 2
Major Redesign
 Number of commands: 100+  19
...
© Performance Vision 2015
SMB EVOLUTION
SMB 2.0  Major Redesign (over SMB1)
SMB 2.1
 Performance
Large MTU, BranchCache,...
© Performance Vision 2015
SUPPORTED SMB VERSIONS
BY MAJOR IMPLEMENTATIONS
SMB 3.0
Samba 4.1Windows Server 2012
SMB 1
Samba...
© Performance Vision 2015
DEFAULT SMB PORTS ASSIGNATION
Since Windows 2000
 Direct Host SMB
Port 445 - TCP
 Deprecated
N...
© Performance Vision 2015
AUTO-DETECTION OF SMB PORTS
 Performance Vision automatically detects SMB traffic
through to Po...
© Performance Vision 2015
SMB DIALECT NEGOTIATION
Client / Server SMB 3.1 SMB 3.02 SMB 3.0 SMB 2.1 SMB 2.0 SMB 1.0
SMB 3.1...
© Performance Vision 2015
SMB DIALECT NEGOTIATION
ON WINDOWS SYSTEMS
Client / Server
Win 10
Server 10
Win 8.1
Server 2012 ...
© Performance Vision 2015
TYPICAL SMB DIALOG
One
Request
One
Response
One
Command
One Packet One Packet
One Line in
Perfor...
© Performance Vision 2015
TYPICAL SMB1 DIALOG EXAMPLE
SMB1 example
One
Single Packet
One
Single Packet
One Line in
Perform...
© Performance Vision 2015
BASIC USE CASE: CONNECT AND BROWSE FILES
 smbclient //fileserver.securactive.lan/public/test -U...
© Performance Vision 2015
SMB1 Commands:
 Session Setup AndX
 Tree Connect AndX
 Check Directory
 Transaction2 (Query_...
© Performance Vision 2015
BASIC USE CASE - SMB1
EXAMPLE WITH PERFORMANCE VISION
SMB1 Commands:
 Session Setup AndX
 Tree...
© Performance Vision 2015
BASIC USE CASE - SMB2
EXAMPLE WITH WIRESHARK
SMB2 Commands:
 Session Setup
 Tree Connect
 Cre...
© Performance Vision 2015
BASIC USE CASE - SMB2
EXAMPLE WITH PERFORMANCE VISION
SMB2 Commands:
 Session Setup
 Tree Conn...
© Performance Vision 2015
TYPICAL SMB2 DIALOG EXAMPLE
SMB2 example
One
Single Packet
One
Single Packet
One Line in
Perform...
© Performance Vision 2015
COMPOUNDED SMB2 REQUESTS
One
Single Packet
One
Single Packet
Multiple Lines in
Performance Visio...
© Performance Vision 2015
COMPOUNDED SMB2 REQUESTS EXAMPLE
Three Lines in
Performance Vision
Create
Request
Query_Info
Req...
© Performance Vision 2015
COMPOUNDED SMB2 REQUESTS EXAMPLE
Compounded Requests
Create,GetInfo, GetInfo in one packet
Compo...
© Performance Vision 2015
LIST OF THE 19 SMB2 COMMANDS
Protocol Negotiation,
User Authentication
and Share Access
NEGOTIAT...
© Performance Vision 2015
LOGIN AUTHORIZATION FAILURE
 smbclient //nas.securactive.lan/public -Udemo -c "rm demo" wrong_p...
© Performance Vision 2015
LOGIN AUTHORIZATION FAILURE
Client / Requests
Negotiate Protocol
Session Setup
Session Setup
Ser...
© Performance Vision 2015
PUT A FILE ON A REMOTE FOLDER - SMB2
 echo "Content!" > test
 smbclient //nas.securactive.lan/...
© Performance Vision 2015
PUT A FILE ON A REMOTE FOLDER - SMB2
Client / Requests
Negotiate Protocol
Session Setup
Session ...
© Performance Vision 2015
PUT A FILE ON A REMOTE FOLDER - SMB2
 Negotiation and authentication
 Is this Tree part of a D...
© Performance Vision 2015
PUT A FILE ON A REMOTE FOLDER - SMB2
 Negotiation and authentication
 Is this Tree part of a D...
© Performance Vision 2015
NOT AUTHORIZED TO DELETE A REMOTE FILE
 The user “demo” has no write access to the file “/publi...
© Performance Vision 2015
NOT AUTHORIZED TO DELETE A REMOTE FILE
Client / Requests
Negotiate Protocol
Session Setup
Sessio...
© Performance Vision 2015
NOT AUTHORIZED TO DELETE A REMOTE FILE
 The user “demo” has not the appropriate access rights t...
© Performance Vision 2015
FAST ANALYSIS: SMB / CIFS
COMMON STATUSES
Common Statuses:
 STATUS_NO_SUCH_FILE,
 STATUS_NO_SU...
© Performance Vision 2015
SMB / CIFS PERFORMANCE ANALYSIS
 1. Connect and Browse Files
 2. Login Authorization Failure
...
© Performance Vision 2015
SMB DOCUMENTATION
Server Message Block (SMB) Protocol Versions 2 and 3
SNIA - SMB Remote Protoco...
© Performance Vision 2015
ONLINE
RESOURCES
Test
 Download a trial Virtual Appliance
 www.securactive.net > Demo
Informat...
© Performance Vision 2015
SOMETHING BIG IS COMING
 Q1 2015 Technical Update
 Q3 2015 Something BIG is coming
Performance
Vision
helps keeping
your customers
happy!
Click to read
more about it.
© Performance Vision 2015
SMB / CIFS
T...
SMB / CIFS
Transactions
Performance
Analysis
© Performance Vision 2015
THANK YOU!
For any Question
sales@securactive.net
s...
Upcoming SlideShare
Loading in …5
×

Workshop on CIFS / SMB Protocol Performance Analysis

3,155 views

Published on

Application performance workshop on SMB / CIFS protocols for File Transfer / Storage

Published in: Technology

Workshop on CIFS / SMB Protocol Performance Analysis

  1. 1. Performance Vision © Performance Vision 2015 SMB / CIFS TRANSACTIONS PERFORMANCE ANALYSIS Leader in Network & Application Performance Analysis
  2. 2. © Performance Vision 2015 SMB / CIFS PERFORMANCE ANALYSIS  1. Connect and Browse Files  2. Login Authorization Failure  3. Put a File on a Remote Folder  4. Not Authorized to Delete a Remote File 2. SMB Overview & Use Cases 1. Product Features 3. Documentation + Q&A
  3. 3. © Performance Vision 2015 SMB / CIFS PERFORMANCE ANALYSIS  1. Connect and Browse Files  2. Login Authorization Failure  3. Put a File on a Remote Folder  4. Not Authorized to Delete a Remote File 2. SMB Overview & Use Cases 1. Product Features 3. Documentation + Q&A
  4. 4. © Performance Vision 2015 WHAT IS SMB USED FOR?  Open  Close  Read  Write  Rename  Move  …  Through a Named Pipe mechanism  For custom Application Level Protocols Remote Files Manipulation Inter-process Communication
  5. 5. © Performance Vision 2015 SMB IS WIDELY SUPPORTED SMB Windows Linux OSX BSD SolarisSamba EMC NetApp Many others…
  6. 6. © Performance Vision 2015 SMB: A LONG HISTORY IBM PC- DOS 1983 1988 Lan Manager 1992 Samba 1992 Windows for Workgroups 1996 Windows NT 4.0 1997 IETF Draft 1999 SNIA 2006 SMB 2.0 2009 SMB 2.1 2012 SMB 3.0 2014 SMB 3.02 2015 SMB 3.1
  7. 7. © Performance Vision 2015 SMB/CIFS: BUSINESS CRITICAL ELEMENTS Today the SMB Protocol Is widely used by both Users & Applications Is a key component when accessing to remote resources Performances are extremely variable due to the heterogeneity of use cases
  8. 8. © Performance Vision 2015 SMB/CIFS ANALYSIS: USER BENEFITS Monitor SMB/CIFS Performance Identify Slow Transactions Correlate File Sharing Problems with Network Performance Issues Access Rights Deleted or Corrupted Files Insufficient Resources All Errors and Warnings Troubleshoot File Sharing Issues
  9. 9. © Performance Vision 2015 IN-DEPTH SMB/CIFS PERFORMANCE ANALYSIS CIFS/SMB in APS Supported CIFS/SMB versions  SMB 1.0  SMB 2.0  SMB 3.0 (no encryption)
  10. 10. © Performance Vision 2015 SMB / CIFS OVERVIEW Overview of SMB / CIFS Commands
  11. 11. © Performance Vision 2015 OVERVIEW OF SMB / CIFS COMMANDS Display CIFS Overview per Command type:  Number of Queries  Number of Errors and Warnings  Performance Metrics (SRT, DTT)  Payload and Number of Packets (PDUs) One-click drill down to more details
  12. 12. © Performance Vision 2015 SMB / CIFS PERFORMANCE Performance of SMB / CIFS Queries over Time
  13. 13. © Performance Vision 2015 PERFORMANCE OF SMB / CIFS QUERIES OVER TIME Display SMB / CIFS Performance metrics over time:  Data Transfer Time and Server Response Time  Number of OKs, Warnings and Errors  Payload for Queries, Responses and Metadata One-click drill down to more details
  14. 14. © Performance Vision 2015 SMB / CIFS CLIENTS SMB / CIFS Most Active Clients
  15. 15. © Performance Vision 2015 SMB / CIFS MOST ACTIVE CLIENTS Display SMB / CIFS metrics for the most active clients:  Client IP  Number of Queries, Errors and Warnings  Performance Metrics (SRT, DTT)  Payloads and Number of Packets (PDUs) One-click drill down to queries and errors
  16. 16. © Performance Vision 2015 SMB / CIFS SERVERS SMB / CIFS Most Active Servers
  17. 17. © Performance Vision 2015 SMB / CIFS MOST ACTIVE SERVERS Display SMB / CIFS metrics for the most active servers:  Server IP  Number of Queries, Errors and Warnings  Performance Metrics (SRT, DTT)  Payloads and Number of Packets (PDUs) One-click drill down to queries and errors
  18. 18. © Performance Vision 2015 SMB / CIFS FILES SMB / CIFS Most Active Files
  19. 19. © Performance Vision 2015 SMB / CIFS TOP FILES Display queries aggregated by Files:  File Path  Number of Queries, Errors and Warnings  Performance Metrics (SRT, DTT)  Payloads and Number of Packets (PDUs) One-click drill down to queries and errors
  20. 20. © Performance Vision 2015 SMB / CIFS TREES SMB / CIFS Most Active Trees
  21. 21. © Performance Vision 2015 SMB / CIFS TOP TREES Display queries aggregated by Trees:  Tree Path  Number of Queries, Errors and Warnings  Performance Metrics (SRT, DTT)  Payloads and Number of Packets (PDUs) One-click drill down to queries and errors
  22. 22. © Performance Vision 2015 DIFFERENCE BETWEEN TREE AND FILE WINSHARE DATA WINSHARE USR Tree (Mount Point) File Private Users UC576 mailbox.pst
  23. 23. © Performance Vision 2015 SMB / CIFS USERS SMB / CIFS Most Active Users
  24. 24. © Performance Vision 2015 SMB / CIFS TOP USERS Display queries aggregated by Users:  Username  Number of Queries, Errors and Warnings  Performance Metrics (SRT, DTT)  Payloads and Number of Packets (PDUs) One-click drill down to queries and errors
  25. 25. © Performance Vision 2015 SMB / CIFS QUERIES List of SMB / CIFS Queries
  26. 26. © Performance Vision 2015 SMB / CIFS QUERIES Available SMB / CIFS Data  Command, Subcommand and Status  File ID and Path  Number of Queries, Errors & Warnings  Performance Metrics (SRT, DTT)  Username  Domain name  Tree ID and Tree name  Data Payload: Reads, Writes  Metadata Payload: Reads, Writes  Number of Packets (PDUs)
  27. 27. © Performance Vision 2015 SMB / CIFS RAW DATA Details of all SMB / CIFS Transactions
  28. 28. © Performance Vision 2015 SMB / CIFS RAW DATA TRUE ROOT CAUSE ANALYSIS SMB / CIFS transactions without any grouping  Useful for advanced troubleshooting  Application behavior auditing Queries Raw Data
  29. 29. © Performance Vision 2015 SMB / CIFS DEDICATED FILTERS Dedicated SMB / CIFS filters: Refine search for specific issues Search results by:  Port number  Command type  Status name  Path name and File ID  Subcommand type  Tree name and Tree ID  User and Domain
  30. 30. © Performance Vision 2015 CORRELATION BETWEEN NETWORK ISSUES & SMB / CIFS TRANSACTIONS SMB / CIFS
  31. 31. © Performance Vision 2015 SMB / CIFS PERFORMANCE ANALYSIS  1. Connect and Browse Files  2. Login Authorization Failure  3. Put a File on a Remote Folder  4. Not Authorized to Delete a Remote File 2. SMB Overview & Use Cases 1. Product Features 3. Q&A
  32. 32. © Performance Vision 2015 SMB VERSIONS & DIALECTS SMB 1 SMB 2 SMB 2.0 SMB 2.1 SMB 3.0 Protocol Versions Protocol Dialects SMB 3.02 SMB 3.1
  33. 33. © Performance Vision 2015 SMB 2: MAJOR IMPROVEMENTS OVER SMB 1 SMB 1 SMB 2 Major Redesign  Number of commands: 100+  19  Pipelining, compounding, caching, larger block size  Durable file handles  Message signing, HMAC SHA-256 algorithm Simplicity Scalability Robustness Security Performance  Number of users, shares, files
  34. 34. © Performance Vision 2015 SMB EVOLUTION SMB 2.0  Major Redesign (over SMB1) SMB 2.1  Performance Large MTU, BranchCache, File Leasing SMB 3.0  Performance Multi Channel, Scale Out, Directory Leasing, BranchCache v2, SMB Direct (over RDMA)…  Virtualization: Remote VSS Snapshots (HyperV)  Fault Tolerance: Transparent Client Failover  Security: End-to-End Encryption, AES signing SMB 3.02  Performance: Bandwidth, SMB Direct, Scale Out…  Virtualization: Hyper-V Live Migration over SMB  Capabilities negotiation SMB 3.1  Mostly Security Improvements  Cluster Dialect Fencing (3.0 / 3.1), Client Failover v2
  35. 35. © Performance Vision 2015 SUPPORTED SMB VERSIONS BY MAJOR IMPLEMENTATIONS SMB 3.0 Samba 4.1Windows Server 2012 SMB 1 SambaWindows 2000, Server 2003 SMB 3.02 Windows 8.1 Windows Server 2012 R2 Samba 4.2 ? Windows 8 SMB 2.1 Windows 7 Windows Server 2008 R2 Samba 4.0 SMB 2.0 Windows Vista Windows Server 2008 Samba 3.6 SMB 3.1 Windows 10 Windows Server 10 Samba ? Windows XP
  36. 36. © Performance Vision 2015 DEFAULT SMB PORTS ASSIGNATION Since Windows 2000  Direct Host SMB Port 445 - TCP  Deprecated NetBEUI over UDP NetBIOS over UDP SMB 2SMB 1 NetBIOS over IPX/SPX NetBIOS over TCP TCP  NetBIOS Name Port 137 - UDP  NetBIOS Datagram Port 138 - UDP  NetBIOS Session Port 139 - TCP  SMB over TCP Port 445 - TCP
  37. 37. © Performance Vision 2015 AUTO-DETECTION OF SMB PORTS  Performance Vision automatically detects SMB traffic through to Port Independent Protocol Identification (PiPi) Nothing to configure! SMB traffic is detected independently of the port used: 139, 445 or other non standard port (TCP)
  38. 38. © Performance Vision 2015 SMB DIALECT NEGOTIATION Client / Server SMB 3.1 SMB 3.02 SMB 3.0 SMB 2.1 SMB 2.0 SMB 1.0 SMB 3.1 3.1 3.02 3.0 2.1 2.0 1.0 SMB 3.02 3.02 3.02 3.0 2.1 2.0 1.0 SMB 3.0 3.0 3.0 3.0 2.1 2.0 1.0 SMB 2.1 2.1 2.1 2.1 2.1 2.0 1.0 SMB 2.0 2.0 2.0 2.0 2.0 2.0 1.0 SMB 1.0 1.0 1.0 1.0 1.0 1.0 1.0
  39. 39. © Performance Vision 2015 SMB DIALECT NEGOTIATION ON WINDOWS SYSTEMS Client / Server Win 10 Server 10 Win 8.1 Server 2012 R2 Win 8 Server 2012 Win 7 Server 2008 R2 Win Vista Server 2008 Previous versions Win 10 Server 10 3.1 3.02 3.0 2.1 2.0 1.0 Win 8.1 Server 2012 R2 3.02 3.02 3.0 2.1 2.0 1.0 Win 8 Server 2012 3.0 3.0 3.0 2.1 2.0 1.0 Win 7 Server 2008 R2 2.1 2.1 2.1 2.1 2.0 1.0 Win Vista Server 2008 2.0 2.0 2.0 2.0 2.0 1.0 Previous versions 1.0 1.0 1.0 1.0 1.0 1.0
  40. 40. © Performance Vision 2015 TYPICAL SMB DIALOG One Request One Response One Command One Packet One Packet One Line in Performance Vision
  41. 41. © Performance Vision 2015 TYPICAL SMB1 DIALOG EXAMPLE SMB1 example One Single Packet One Single Packet One Line in Performance Vision Tree Connect AndX Command Tree Connect AndX Request Tree Connect AndX Response
  42. 42. © Performance Vision 2015 BASIC USE CASE: CONNECT AND BROWSE FILES  smbclient //fileserver.securactive.lan/public/test -Utbouchette -c "ls " password -mNT1 SMB1 - Use Case: Connect to Share Directory and Browse Files  smbclient //nas.securactive.lan/public/test -Uadmin -c "ls " password -mSMB2 SMB2 - Use Case: Connect to Share Directory and Browse Files
  43. 43. © Performance Vision 2015 SMB1 Commands:  Session Setup AndX  Tree Connect AndX  Check Directory  Transaction2 (Query_Path_Info)  Eight Packets  4 Requests  4 Responses BASIC USE CASE - SMB1 EXAMPLE WITH WIRESHARK
  44. 44. © Performance Vision 2015 BASIC USE CASE - SMB1 EXAMPLE WITH PERFORMANCE VISION SMB1 Commands:  Session Setup AndX  Tree Connect AndX  Check Directory  Transaction2 (Query_Path_Info)  Eight Packets  4 Requests  4 Responses
  45. 45. © Performance Vision 2015 BASIC USE CASE - SMB2 EXAMPLE WITH WIRESHARK SMB2 Commands:  Session Setup  Tree Connect  Create Request + Close Request  Create Request  Eight Packets  5 Requests  5 Responses
  46. 46. © Performance Vision 2015 BASIC USE CASE - SMB2 EXAMPLE WITH PERFORMANCE VISION SMB2 Commands:  Session Setup  Tree Connect  Create Request + Close Request  Create Request  Query Packets  5 Requests  5 Responses
  47. 47. © Performance Vision 2015 TYPICAL SMB2 DIALOG EXAMPLE SMB2 example One Single Packet One Single Packet One Line in Performance Vision Tree Connect Command Tree Connect Request Tree Connect Response
  48. 48. © Performance Vision 2015 COMPOUNDED SMB2 REQUESTS One Single Packet One Single Packet Multiple Lines in Performance Vision Multiple Requests Multiple Responses Multiple Commands
  49. 49. © Performance Vision 2015 COMPOUNDED SMB2 REQUESTS EXAMPLE Three Lines in Performance Vision Create Request Query_Info Request SMB2_FS_VOLUME_INFO Query_Info Request SMB2_FS_ATTRIBUTE_INFO One Packet Query_Info Response SMB2_FS_ATTRIBUTE_INFO Query_Info Response SMB2_FS_VOLUME_INFO Create Response One Packet Three Commands Create, Query_Info, Query_Info
  50. 50. © Performance Vision 2015 COMPOUNDED SMB2 REQUESTS EXAMPLE Compounded Requests Create,GetInfo, GetInfo in one packet Compounded Responses Create,GetInfo, GetInfo in one packet Three Commands in Performance Vision
  51. 51. © Performance Vision 2015 LIST OF THE 19 SMB2 COMMANDS Protocol Negotiation, User Authentication and Share Access NEGOTIATE SESSION_SETUP LOGOFF TREE_CONNECT TREE_DISCONNECT File, Directory and Volume Access CANCEL CHANGE_NOTIFY CLOSE CREATE FLUSH IOCTL LOCK QUERY_DIRECTORY QUERY_INFO READ SET_INFO WRITE Other ECHO OPLOCK_BREAK
  52. 52. © Performance Vision 2015 LOGIN AUTHORIZATION FAILURE  smbclient //nas.securactive.lan/public -Udemo -c "rm demo" wrong_password -mSMB2 SMB2 - Wrong password when connecting to a remote resource
  53. 53. © Performance Vision 2015 LOGIN AUTHORIZATION FAILURE Client / Requests Negotiate Protocol Session Setup Session Setup Server / Responses Negotiate Protocol Session Setup Session Setup 6 Packets 3 Commands Authentication  User “demo” was not authorized to connect to the remote resource Negotiation
  54. 54. © Performance Vision 2015 PUT A FILE ON A REMOTE FOLDER - SMB2  echo "Content!" > test  smbclient //nas.securactive.lan/public -Udemo -c "cd specs; put test" password -mSMB2 SMB2 - Use Case: Put a File on a Remote Folder
  55. 55. © Performance Vision 2015 PUT A FILE ON A REMOTE FOLDER - SMB2 Client / Requests Negotiate Protocol Session Setup Session Setup Tree Connect [IPC$] IOCTL Tree Disconnect Tree Connect [IP@public] Create [Folder specs] Close Create [File test] Write Close Server / Responses Negotiate Protocol Session Setup Session Setup Tree Connect [IPC$] IOCTL Tree Disconnect Tree Connect [IP@public] Create [Folder specs] Close Create [File test] Write Close 24 Packets 12 Commands Authentication GSS Token Exchange Is this Tree part of a DFS cluster? “cd specs” “put test”: create “/specs/test” Negotiation Check “specs” directory existence
  56. 56. © Performance Vision 2015 PUT A FILE ON A REMOTE FOLDER - SMB2  Negotiation and authentication  Is this Tree part of a DFS cluster?  Change path into directory: “specs”  Put file “test”
  57. 57. © Performance Vision 2015 PUT A FILE ON A REMOTE FOLDER - SMB2  Negotiation and authentication  Is this Tree part of a DFS cluster?  Change path into directory: “specs”  Put file “test”
  58. 58. © Performance Vision 2015 NOT AUTHORIZED TO DELETE A REMOTE FILE  The user “demo” has no write access to the file “/public/demo”  smbclient //nas.securactive.lan/public -Udemo -c "rm demo" password -mSMB2 SMB2 - Not Authorized to Delete a Remote File
  59. 59. © Performance Vision 2015 NOT AUTHORIZED TO DELETE A REMOTE FILE Client / Requests Negotiate Protocol Session Setup Session Setup Tree Connect [IPC$] IOCTL Tree Disconnect Tree Connect [IP@public] Create [Delete file demo] Server / Responses Negotiate Protocol Session Setup Session Setup Tree Connect [IPC$] IOCTL Tree Disconnect Tree Connect [IP@public] Create [Delete file demo] 16 Packets 8 Commands GSS Token Exchange Is this Tree part of a DFS cluster? Delete file “demo”
  60. 60. © Performance Vision 2015 NOT AUTHORIZED TO DELETE A REMOTE FILE  The user “demo” has not the appropriate access rights to the file “/public/demo”
  61. 61. © Performance Vision 2015 FAST ANALYSIS: SMB / CIFS COMMON STATUSES Common Statuses:  STATUS_NO_SUCH_FILE,  STATUS_NO_SUCH_DEVICE,  STATUS_OBJECT_NAME_NOT_FOUND,  STATUS_OBJECT_PATH_INVALID,  STATUS_OBJECT_PATH_NOT_FOUND,  STATUS_OBJECT_PATH_SYNTAX_BAD,  STATUS_DFS_EXIT_PATH_FOUND,  STATUS_REDIRECTOR_NOT_STARTED,  STATUS_TOO_MANY_OPENED_FILES,  STATUS_ACCESS_DENIED,  STATUS_PORT_CONNECTION_REFUSED,  STATUS_FILE_DELETED,  STATUS_INSUFF_SERVER_RESOURCES,  STATUS_MORE_PROCESSING_REQUIRED,  STATUS_BUFFER_OVERFLOW,  STATUS_WRONG_PASSWORD,  STATUS_NETWORK_ACCESS_DENIED,  STATUS_TOO_MANY_SESSIONS. Common statuses category contains the most common SMB/CIFS errors and warnings. cifs.status = "common" Note: We do not consider SMB_STATUS_NO_MORE_FILES as a Warning
  62. 62. © Performance Vision 2015 SMB / CIFS PERFORMANCE ANALYSIS  1. Connect and Browse Files  2. Login Authorization Failure  3. Put a File on a Remote Folder  4. Not Authorized to Delete a Remote File 2. SMB Overview & Use Cases 1. Product Features 3. Documentation + Q&A
  63. 63. © Performance Vision 2015 SMB DOCUMENTATION Server Message Block (SMB) Protocol Versions 2 and 3 SNIA - SMB Remote Protocol SNIA - SMB2 Big Improvements Present and Future File Serving with Samba
  64. 64. © Performance Vision 2015 ONLINE RESOURCES Test  Download a trial Virtual Appliance  www.securactive.net > Demo Information  Contact us for a live demo  www.securactive.net > Company Buy  Locate a distribution partner  www.securactive.net > Partners
  65. 65. © Performance Vision 2015 SOMETHING BIG IS COMING  Q1 2015 Technical Update  Q3 2015 Something BIG is coming
  66. 66. Performance Vision helps keeping your customers happy! Click to read more about it. © Performance Vision 2015 SMB / CIFS TRANSACTIONS PERFORMANCE ANALYSIS Satisfied Customers
  67. 67. SMB / CIFS Transactions Performance Analysis © Performance Vision 2015 THANK YOU! For any Question sales@securactive.net support@securactive.net Follow Us on @SecurActivePV www.securactive.net blog.securactive.net Leader in Network & Application Performance Analysis

×