Exporting SMB objects

Exporting SMB objects is a simple feature for exporting SMB statistics.

Getting ready

To export HTTP objects, choose File | Export Objects | SMB/SMB2.

How to do it...

To export SMB objects, follow these steps:

1. You can use this feature when a capture is running, or you can run it on the captured file. You will get the following window:

Figure 15.12: SMB—object export

2. From here, you can get a list of the servers that were accessed, including the files that were accessed in each one of them. You can see the packet number, hostname, content type (with operation mode, read or read/write), size, and filename.

3. You can use the Save As or Save All buttons for saving the data in a file.
4. In the Content Type column, you will see the following contents:
   • FILE: If the content that is accessed is a file served by the specified server(s).
   • PIPE: As we discussed in the earlier sections of this chapter, SMB is also used for IPC. For this IPC mechanism, the SMB system provides a named pipes service...