Need some advice on learning networking
Collapse
X
-
A tree is known by its fruit, a man by his deeds. A good deed is never lost, he who sows courtesy, reaps friendship, and he who plants kindness gathers love.
Blessed are they who can laugh at themselves, for they shall never cease to be amused. -
Re: Need some advice on learning networking
It seems like you and I have this conversation often. Let me repeat myself: I am not learning this because I think I'm gonna use it every day, or ever. Nope.
I'm learning WireShark because:
a.) I find it interesting
and
b.) I want to know everything about networking that I possibly can.
Lastly, learning WireShark isn't preventing me from correcting the path, port or any of the other things that you mentioned.Adversity temporarily visits a strong man but stays with the weak for a lifetime.Comment
-
Re: Need some advice on learning networking
I will dig into my memos and find what a member here written some time ago about using Windows buit in
tool "Event Viewer". It covers almost everything you need to troubleshoot SMB problems.
OK i find it.
"Use caution when enabling SMBV1. There is a reason this was disabled. I believe it was the "Wanna Cry" virus. By enabling SMBV1 you are exposing the customer to this risk. Admittedly it seems like there is no other choice when in fact there are fixes. Firmware and other copier settings. Permission settings on the computer.
A tool I have been using recently is "Event Viewer" This is built into windows so it does not require and other installation of software. In the search just top in "Event Viewer" and it will be found. Then scroll through too:
Application and Service Logs
Microsoft
Windows
SMB Section (SMBClient, SMBDirect, SMBServer, SMBWitnessClient)
When you click on each section there is an Audit, Connectivity, Operational, and Security
I have found most of my fixes under SMBServer, Security. Just look at the times and open it and read the errors. If there is communication is reaching the machine usually there will be an error of some kind. Sometimes it makes sense such as communication from SMB1 when SMB1 is disabled. The confusing one comes in to play when the error is related to authentication and you know the login and password's are correct. Then it is a matter of permissions on the computer not being correct someplace. This could be password not meeting security settings, (length/characters), sharing in "Advanced Permissions", etc,...
Sometimes services get turned off with windows updates a few I have found are:
Function Discovery Provider Host
Function Discovery Resource Publication
SSDP Discovery
TCP/IP Netbios Helper
UPnP Device Host
DNS Client
Device Association Service
A couple of the above settings will also keep "Network Discovery" from staying enabled. It can be turned on but then you exit and go back it is off again.
If you run into a problem that everything works and after a very specific time each time check the "ARP" table settings. Had one years ago that after 15 minutes the copier IP dropped out of the Arp table and the copier would no longer email. Tried 5 different copiers and manufactures and customers IT still blamed the copier because they did not want to figure out why on their end. "Adversity temporarily visits a strong man but stays with the weak for a lifetime.Comment
-
Re: Need some advice on learning networking
It seems like you and I have this conversation often. Let me repeat myself: I am not learning this because I think I'm gonna use it every day, or ever. Nope.
I'm learning WireShark because:
a.) I find it interesting
and
b.) I want to know everything about networking that I possibly can.
Lastly, learning WireShark isn't preventing me from correcting the path, port or any of the other things that you mentioned.
More Training the better.Comment
-
Re: Need some advice on learning networking
For the record, I do not agree with you that WireShark is without its benefits when troubleshooting SMB.
After only a short time learning WireShark, I've learned that I can easily determine the version of SMB that the copier is capable of.
The first thing that happens when SMB is initiated is that the copier sends out a negotiating request. In other words, if the copier is able to run SMB3 it will check with Windows 10 to see if this is compatible with the operating system. If the answer is no, the copier will down version to SMB2 and ask Windows 10 if this is acceptable. Thus, if you don't see a request for SMB3 or SMB2 from the copier, you know it's only capable of SMB1...and we know that won't work.
Are there other ways to find that information? Sure. But WireShark is another tool in the tool bag and I don't know about you but I can never have too many tools.Adversity temporarily visits a strong man but stays with the weak for a lifetime.Comment
-
Adversity temporarily visits a strong man but stays with the weak for a lifetime.Comment
-
-
Re: Need some advice on learning networking
On KonMin and I suppose other manufacturers SMB version that MFP can use is to be easily found under Network settings.A tree is known by its fruit, a man by his deeds. A good deed is never lost, he who sows courtesy, reaps friendship, and he who plants kindness gathers love.
Blessed are they who can laugh at themselves, for they shall never cease to be amused.Comment
-
Re: Need some advice on learning networking
You're right and I think I mentioned that there are other ways of finding the SMB version. But what the copier doesn't tell you is that the session actually initiated once both devices agree on a SMB protocol. And there's MUCH more information to be gleaned from WireShark. I just used that as an example.
Look, I understand some aren't interested in WireShark. Hell, I don't think I'm gonna use half the stuff I've learned but it's fun to me.Adversity temporarily visits a strong man but stays with the weak for a lifetime.Comment
-
Re: Need some advice on learning networking
Capture some FTP files from one PC to another. Make a simple .txt file and send that using windows CMD. Creating an FTP sever with windows is easy. Think that would be an interesting exercise. You will be able to read the contents of the file using wireshark.WhateverComment
-
Re: Need some advice on learning networking
I think the fella in the video that I posted made an excellent suggestion. He said the best time to learn SMB on WireShark is when everything is working correctly. He went on to say that once you capture the data be sure to make a copy of and keep it on file as a reference. That way when you run into a situation where SMB has a problem, you can compare that data with your reference information.Adversity temporarily visits a strong man but stays with the weak for a lifetime.Comment
-
Re: Need some advice on learning networking
You're right and I think I mentioned that there are other ways of finding the SMB version. But what the copier doesn't tell you is that the session actually initiated once both devices agree on a SMB protocol. And there's MUCH more information to be gleaned from WireShark. I just used that as an example.
Look, I understand some aren't interested in WireShark. Hell, I don't think I'm gonna use half the stuff I've learned but it's fun to me.
I'm probably one of biggest fan of idea that learning is everything. As a single tech my moto is coming from Prodigy band album 'Always Outnumbered, Never Outgunned'.
And I totally understand and admire your striving to become better every day.
In fact you make me sometimes jealous being so sharp minded and the pace you learning new stuff is unbelievable I used to do this but some 30 years ago
Keep it coming 👍A tree is known by its fruit, a man by his deeds. A good deed is never lost, he who sows courtesy, reaps friendship, and he who plants kindness gathers love.
Blessed are they who can laugh at themselves, for they shall never cease to be amused.Comment
-
Re: Need some advice on learning networking
Billy don't get me wrong.
I'm probably one of biggest fan of idea that learning is everything. As a single tech my moto is coming from Prodigy band album 'Always Outnumbered, Never Outgunned'.
And I totally understand and admire your striving to become better every day.
In fact you make me sometimes jealous being so sharp minded and the pace you learning new stuff is unbelievable I used to do this but some 30 years ago
Keep it coming 👍
I'm in awe of some the members on here. Even though I was away for this business for many years, I know a good tech when I hear one. And there's some GREAT ones on this site. I'm nothing compared to some of you guys. Cheers.Adversity temporarily visits a strong man but stays with the weak for a lifetime.Comment
-
Comment