Forum Discussion
Azure ATP connection closed errors
- Engineering has researched the sampled capture ans managed to reproduce the issue.Sadly, this is not an easy fix, it's a specific traffic/rare traffic on top of SMB1 we were not aware of before and currently cannot parse.We have opened a bug for it.It is planned but in low priority for now as telemetry shows it happens rarely.We will update once we get it resolved so the fix can be verified.
EliOfek- I have the capture with net mon. Is there anywhere I can securely upload this or share it with you?
Microsoftarchedmeerkat , The best option is to open a support case and give me the case #.
I will ask the assigned engineer to open a secured workspace for you where we can exchange files,
And also to add me to the case thread so I can help and add PG members as needed.
- EliOfek
archedmeerkat , Yes, I figured so as telemetry showed it is rare as well, I assume not too many people use protocols on top of SMB1 anymore which is good 🙂
Have only seen this in our lab so far, so I think the impact is currently pretty low for us.
- EliOfekEngineering has researched the sampled capture ans managed to reproduce the issue.Sadly, this is not an easy fix, it's a specific traffic/rare traffic on top of SMB1 we were not aware of before and currently cannot parse.We have opened a bug for it.It is planned but in low priority for now as telemetry shows it happens rarely.We will update once we get it resolved so the fix can be verified.
I've sent the case number over in a private message, but wasn't sure how to add you to the case. I'll see if I can have that done shortly.