Error 'Failure decoding message, disconnecting transport' during JCIFS based File System Discover Scan of SMB2 shares

Products

• Data Loss Prevention Network Discover

Issue/Introduction

When attempting to mount an SMB2 based content root using JCIFS you receive the following error:

jcifs.smb.SmbTransportImpl doRecv
WARNING: Failure decoding message, disconnecting transport
java.io.IOException: WHAT? ( read 124 decoded 128 ): command=SMB2_CLOSE,status=0,flags=0x000D,mid=8,wordCount=0,byteCount=0
 at jcifs.smb.SmbTransportImpl.doRecvSMB2(SmbTransportImpl.java:1192)
 at jcifs.smb.SmbTransportImpl.doRecv(SmbTransportImpl.java:1105)
 at jcifs.util.transport.Transport.loop(Transport.java:459)
 at jcifs.util.transport.Transport.run(Transport.java:769)
 at java.lang.Thread.run(Thread.java:748)

Environment

• DLP 15.5 MP2
• SMB2 Network Shares
• JCIFS based scanning

Cause

Caused by a defect with jcifs-ng v2.0.7 when dealing with compound SMB2 messages.

Resolution

A fix is available for the 15.5 MP2 jcifs jar. Please contact support to obtain this fix if you are impacted by this issue.