I am capturing file transfers between two windows computers. Does SMB use a tcp 3 way handshake to start the transmission?
I looked for a syn - syn/ack - ack and did not find one?
I thought SMB used TCP port 445?
The transfer took a minute or two just to start transferring any data and I got a bunch of SMB packets but I did not see a handshake.