Detect SMB vs SMB2 for network share

Question

Given a UNC path like \\server\share, is there any way to determine, using the Win32 API, whether the local and remote computers are connecting using SMB or SMB2?

Check this http://stackoverflow.com/questions/10800616/determine-protocol-of-a-network-drive — Sameer, Jan 20 '14 at 11:03

score 10 · Accepted Answer · answered Jan 29 '14 at 18:15

10

After burning a paid support incident, the official answer from Microsoft is that this information isn't exposed by the driver in Windows 7. On Windows 8 it's available using WMI and the MSFT_SmbConnection class, or PowerShell's Get-SmbConnection cmdlet.

answered Jan 29 '14 at 18:15

Zoë Peterson

13,094
2
44
64

Win10 PowerShell's `Get-SmbConnection` cmdlet required admin shell for me. worked – wrossmck Mar 19 '18 at 16:52

score 0 · Answer 2 · answered Jan 23 '14 at 16:20

Maybe you can find the answer in the SMB2 specification.

Server Message Block (SMB) Protocol Versions 2 and 3 specification

There should be a way to detect the version... Maybe you can try to implement a minimal part of the SMB protocol just to ask the server the protocol version?

score 0 · Answer 3 · answered Jan 28 '14 at 18:49

0

one of the easyest way to find is by taking a network trace using the wireshark (on windows) or tcptrace/tcpdump on the unix (where SMB is running). The trace output should give you the version

answered Jan 28 '14 at 18:49

Aravind

1

I'm looking for something that we can detect dynamically at program startup for arbitrary servers that our customers are connecting to. Using a packet sniffer or debugger won't work. – Zoë Peterson Jan 29 '14 at 16:51

Detect SMB vs SMB2 for network share

3 Answers3