has anyone seen duplicate smb packets
I'll make it brief.. I wonder if anyone has seen duplicate SMB commands, responses and data. I'm honestly not suite sure if I've never noticed this before or if its a bad thing
for example in this trace , packets 689 and 714 have the same SMB header, but the ip and tcp headers are different.
the client is windows 7 and the server is 2012 using DFS
any feedback would be appreciated
Comments
Fyi. Some of my colleagues mentioned they have seen similar behavior with AV applications