smbcmp: new tool to compare SMB traces

smbcmp: new tool to compare SMB traces

[Aurélien Aptel]

Hi,

I've written a small utility to diff and compare SMB network
captures. It's a simple python script that uses tshark to filter and
dissect SMB packets, with a curses UI.

https://github.com/aaptel/smbcmp

There is a gif demo on there, if you're into that.

Enjoy,

-- 
Aurélien Aptel / SUSE Labs Samba Team
GPG: 1839 CB5F 9F5B FB9B AA97  8C99 03C8 A49B 521B D5D3
SUSE Linux GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)

Re: smbcmp: new tool to compare SMB traces

[Steve French]

This is a great idea - why don't we merge this into Samba git tree, so
it can be packaged in one of the client/tools rpms?

On Tue, Jan 31, 2017 at 7:13 AM, Aurélien Aptel <aaptel-IBi9RG/b67k@public.gmane.org> wrote:
> Hi,
>
> I've written a small utility to diff and compare SMB network
> captures. It's a simple python script that uses tshark to filter and
> dissect SMB packets, with a curses UI.
>
> https://github.com/aaptel/smbcmp
>
> There is a gif demo on there, if you're into that.
>
> Enjoy,
>
> --
> Aurélien Aptel / SUSE Labs Samba Team
> GPG: 1839 CB5F 9F5B FB9B AA97  8C99 03C8 A49B 521B D5D3
> SUSE Linux GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
> GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)
> --
> To unsubscribe from this list: send the line "unsubscribe linux-cifs" in
> the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html



-- 
Thanks,

Steve

Re: smbcmp: new tool to compare SMB traces

[Sachin Prabhu]

On Tue, 2017-01-31 at 14:13 +0100, Aurélien Aptel wrote:
> Hi,
> 
> I've written a small utility to diff and compare SMB network
> captures. It's a simple python script that uses tshark to filter and
> dissect SMB packets, with a curses UI.
> 
> https://github.com/aaptel/smbcmp
> 
> There is a gif demo on there, if you're into that.
> 
> Enjoy,
> 

Interesting. How easy is it to extend this for NFS?

Sachin Prabhu

Re: smbcmp: new tool to compare SMB traces

[Aurélien Aptel]

Hi Steve,

Steve French <smfrench-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> writes:
> This is a great idea - why don't we merge this into Samba git tree, so
> it can be packaged in one of the client/tools rpms?

I think it makes more sense to have a separate repo. I don't like to do
the dance where I'm working on commit X but want the tool in the same
tree at its latest version.

We have a package for openSUSE here [1], it should be simple to adapt
for other distros.

1: https://build.opensuse.org/package/show/home:dmulder/smbcmp

-- 
Aurélien Aptel / SUSE Labs Samba Team
GPG: 1839 CB5F 9F5B FB9B AA97  8C99 03C8 A49B 521B D5D3
SUSE Linux GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)

Re: smbcmp: new tool to compare SMB traces

[Aurélien Aptel]

Hi Sachin,

Sachin Prabhu <sprabhu-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> writes:
> Interesting. How easy is it to extend this for NFS?

Pretty easy I would say, you just have to tweak a regex in
smb_summaries() and smb_packet().

-- 
Aurélien Aptel / SUSE Labs Samba Team
GPG: 1839 CB5F 9F5B FB9B AA97  8C99 03C8 A49B 521B D5D3
SUSE Linux GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)