> Hi, > > I have a query related to NFS packet captured at application layer. I > have setup the NFS node on local system itself (just for test purpose). > And capturing the packets for various events (mount, umount, file access > etc) on loop-back interface itself. However, in case of the umount > scenario, I do not see any NFS packet captured (I can only see three TCP > packets exchanged). > > Could someone please explain why there is no NFS packet observed during > an unmount? Also there seems not much information, related to NFS mount > point being unmounted, in TCP packet. So is there any way to detect the > unmount operation by hacking such packets? > I guess you used NFSv4. NFSv4 umount operation does not send any NFS packet. The TCP packets you captured were sent by TCP close procedure, because NFS umount operation need close the TCP connection with NFS server. -- Regards Bian Naimeng -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html