Procmon scan smb request

Mohamed jihad bayali 1,131 Reputation points
2024-03-05T16:53:35.69+00:00

Hello,

I have an issue on a fileshare server, users are complaining about latency, especially when transferring files to the fileshare server,opening files, or modifying files.

I want to launch a procmon on the user workstation to see what what happen when a file is being opened,modified or transfered.(i'm suspecting Antivirus)

Could you please tell me what query on the filter of procmon i should do to target the smb path? cause i think procmon doesn't support the classical UNC path => "\XX\X"?

Thanks

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,169 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.