On Jul 27, 4:30 pm, Kicking Albright <Albri...@Kicking.com> wrote:
> Jeff wrote:
> > I'm running Windows Vista Business SP1.
>
> > I browsed to a file share on a samba server that is at a remote site,
> > reachable by a vpn with only around 768Kbps bandwidth. I didn't copy
> > or move anything to or from the remote folder, but just closed the
> > explorer window. I then noticed that Vista continued to generate a
> > large amount of traffic to that remote samba server for the next few
> > minutes.
>
> > I need to figure out how to recognize and control this behavior,
> > because if we had 50 vista machines instead just the one, this would
> > bring our network to a screeching halt. Could anyone provide a useful
> > reference ?
>
> Vista indexing has nothing to do packets being sent across a network.
>
> http://apcmag.com/could_vista_actual...n_networks.htm
>
> What you need to do use something like Wireshark on Vista and some other
> packet capturing solution for Linux and see what are the packets being
> sent between the two O/S platforms over the network.
>
> <http://www.download3k.com/Network-tools/Network-Administration/Downlo...>
Yes, that's exactly what I did, and Vista continued to generate SMB
traffic to to the remote server. If not indexing, it's some kind of
cache pre-loading. It seemed like more than would be required to
simply enumerate the shares on the remote server. It's not strictly
speaking "netbios" traffic because my servers don't offer that but
rather use SMB over TCP. And unlike in the article there's no
discovery going on here because there's no WINS. We use DNS only, so
the remote server in question was looked up in DNS, connected to by
SMB (tcp/445) and then the explorer window on Vista was closed. But
the traffic continued.
I'm basically trying to determine whether to let more Vista machines
onto my network and without clear documentation on just what is going
on here I'm going to have to refuse.
Similar Threads
Linear Mode
