Tshark smb query

[Tal Bar-Or <tbaror () gmail com>]

Hello,

I have following  output from Tshark trying to analyze SMB performance
E:\>tshark -r test.pcap -nqz smb,rtt

===================================================================
SMB RTT Statistics:
Filter:
Commands                   Calls   Min RTT   Max RTT   Avg RTT
Trans                          6   0.00025   0.00142   0.00064
Tree Disconnect                4   0.00012   0.00036   0.00023
Negotiate Protocol             2   0.00042   0.00042   0.00042
Session Setup AndX             3   0.00030   0.00131   0.00074
Logoff AndX                    2   0.00017   0.00055   0.00036
Tree Connect AndX              4   0.00013   0.00064   0.00031

Transaction2 Commands      Calls   Min RTT   Max RTT   Avg RTT
FIND_FIRST2                  194   0.00019   0.00033   0.00024
QUERY_PATH_INFO              428   0.00016   0.00198   0.00026
GET_DFS_REFERRAL               3   0.00019   0.00028   0.00024

NT Transaction Commands    Calls   Min RTT   Max RTT   Avg RTT
===================================================================

I would like to recognize which command is client side  and which is server
side to analyze source of latency

it will be grate  if someone could help with this topic.

Thanks

Tal,

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe