Skip to main content
NetApp Knowledge Base

All Cifs sessions on a TCP stream are reset after an session logoff on one cifs session

not set
Last Updated:

Applies to

  • ONTAP 9
  • CIFS


  • Random files fail to Intermittently open when antimalware software is present
  • All CIFS sessions on a TCP stream are reset after a session logoff on one CIFS session
  • It results in client reconnecting, loss of access to the share, or other unexpected results depending upon the application and client OS
  • Packet trace shows multiple CIFS sessions on the same TCP stream
    • Session logoff on one SMB session
    • TCP RST,ACK (which kills all CIFS sessions on the stream)

73 2021-03-08 09:14:46.524896 0.000428 10.128.xx.xx 10.128.xx.xx 528 62107 445 SMB2 7 Session Setup Request, NTLMSSP_AUTH, User: \
74 2021-03-08 09:14:46.525837 0.000941 10.128.xx.xx 10.128.xx.xx 91 445 62107 SMB2 7 Session Setup Response
75 2021-03-08 09:14:46.526430 0.000593 10.128.xx.xx 10.128.xx.xx 0 62107 445 TCP 7 62107 → 445 [RST, ACK] Seq=4007904579 Ack=844321159 Win=0 Len=0



Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.
Scan to view the article on your device