Visualising the opening and accessing a file via SMB

[Richard Sharpe <realrichardsharpe () gmail com>]

Hi folks,

I see a need for a tool like the following.

Take a capture of SMB1 or SMB2 traffic and draw a chart vertically showing:

Opens and closes of a specified (or all) file(s) with
nested/overlapping opens/closes showing up in different colors.
OpLock breaks and locks and reads/writes showing up as well.

The reason for this is so we can more easily see what is happening
between one or more clients.

Has anyone done anything like this or is there a framework I can start with?

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe