Digging some more, I think it might be a WinPcap problem. If I'm
reading it right, WinPcap might have problems with NDIS network
drivers. My 64-bit servers in question are trying to sniff on a
Broadcom L2 NDIS network adapter. So far my 32-bit servers that I've
tested with have been Intel Pro 10
When I run 'dir //remote_server/c$' from a 64-bit Windows 2003 Server,
I see the handshake packets but -not- any of the data packets
afterwards. If I run it from a 32-bit Windows 2003 Server, I see all
of the TCP and SMB traffic that comes after the handshake. Wireshark
0.99.6a is installed on al
