SMBTORTURE(1)
π
SMBTORTURE(1) β the smbtorture era π
okay bestie, pull up a chair, because we're about to run a whole series of tests against an SMB server and honestly? it's giving legend behaviour. this is the smbtorture page, from section 1 of the manual, and it's so much fun.
β¨ NAME β¨
smbtorture β run a series of tests against a SMB server. yes queen, that's the whole job description. π
π¦ SYNOPSIS π¦
smbtorture {//server/share} [-d debuglevel] [-U user%pass] [-k]
[-N numprocs] [-n netbios_name] [-W workgroup]
[-e num files(entries)] [-O socket_options]
[-m maximum_protocol] [-L] [-c CLIENT.TXT] [-t timelimit]
[-C filename] [-A] [-p port] [-s seed] [-f max_failures] [-X]
{BINDING-STRING|UNC} {TEST1} [TEST2] [...]
look at her. iconic. no notes. π
πΈ DESCRIPTION πΈ
smbtorture is a testsuite that runs several tests against a SMB server. all tests are known to succeed against a Windows 2003 server (?) β yes, the question mark is literally in the original, we love an honest queen. smbtorture's primary goal is finding differences in implementations of the SMB protocol and testing SMB servers. it's basically a vibe check for protocol implementations. π«Ά
any number of tests can be specified on the command-line. if no tests are specified, all tests are run. she's thorough like that.
if no arguments are specified at all, all available options and tests are listed. so if you're ever like "what does this do", just run her naked and she'll spill. π
π Binding string format
the binding string format is:
TRANSPORT:host[flags]
where TRANSPORT is either ncacn_np for SMB, ncacn_ip_tcp for RPC/TCP or ncalrpc for local connections. three transports, three moods. π
host is an IP or hostname or netbios name. if the binding string identifies the server side of an endpoint, host may be an empty string. yes, empty. she can work with nothing. main character energy fr.
flags can include a SMB pipe name if using the ncacn_np transport or a TCP port number if using the ncacn_ip_tcp transport, otherwise they will be auto-determined. she'll figure it out herself, don't worry.
other recognised flags are:
signβ enable ntlmssp signingsealβ enable ntlmssp sealingconnectβ enable rpc connect level auth (auth, but no sign or seal)validateβ enable the NDR validatorprintβ enable debugging of the packetsbigendianβ use bigendian RPCpadcheckβ check reply data for non-zero pad bytes
for example, these all connect to the samr pipe:
ncacn_np:myserverncacn_np:myserver[samr]ncacn_np:myserver[\\pipe\\samr]ncacn_np:myserver[/pipe/samr]ncacn_np:myserver[samr,sign,print]ncacn_np:myserver[\\pipe\\samr,sign,seal,bigendian]ncacn_np:myserver[/pipe/samr,seal,validate]ncacn_np:ncacn_np:[/pipe/samr]ncacn_ip_tcp:myserverncacn_ip_tcp:myserver[1024]ncacn_ip_tcp:myserver[1024,sign,seal]ncalrpc:
thirteen examples and every single one ate. π
π UNC Format
the UNC format is:
//server/share
simple. clean. no cap. β¨
π OPTIONS π
-d debuglevelβ use the specified Samba debug level. a higher debug level means more output. more words, more chaos, more fun. π-U user%passβ use the specified username/password combination when logging in to a remote server. the%is doing the heavy lifting here, don't forget it.-kβ use kerberos when authenticating. fancy. π-W workgroupβ use specified name as our workgroup name.-n netbios_nameβ use specified name as our NetBIOS name.-O socket_optionsβ use specified socket options, equivalent of thesmb.confoption βsocket optionsβ. see thesmb.conf(5)manpage for details.-m max_protocolβ specify the maximum SMB dialect that should be used. possible values are:CORE,COREPLUS,LANMAN1,LANMAN2,NT1. pick your fighter. π₯-s seedβ initialize the randomizer usingseedas seed.-Lβ use oplocks.-Xβ enable dangerous tests. use with care! this might crash your server... π DANGER, BESTIE. do not just yolo this one.-t timelimitβ specify the NBENCH time limit in seconds. defaults to600.-p portsβ specify ports to connect to.-c fileβ read NBENCH commands fromfileinstead of fromCLIENT.TXT.-Aβ show not justOKorFAILEDbut more detailed output. used only by DENY test at the moment.-C filenameβ load a list of UNC names from the specified filename. smbtorture instances will connect to a random host from this list. randomised slay. π-N numprocsβ specify number of smbtorture processes to launch.-e num_filesβ number of entries to use in certain tests (such as creating X files) (default:1000).-f max_failuresβ number of failures before aborting a test (default:1).
β VERSION β
this man page is correct for version 4.0 of the Samba suite. periodt. π
π SEE ALSO π
Samba
π§ AUTHOR π§
this utility is part of the Samba[1] suite, which is developed by the global Samba Team[2].
smbtorture was written by Andrew Tridgell.
this manpage was written by Jelmer Vernooij.
π NOTES π
- Samba β
http://www.samba.org/ - Samba Team β
http://www.samba.org/samba/team/
π and that's the whole page bestie, go forth and torture some SMB servers (responsibly, and definitely not with -X unless you mean it).
this was Samba 4.0, dated 09/09/2026, and it's giving SMBTORTURE(1) in the most iconic way possible. byeee π¦β¨
π¦ where this page comes from
- fedora 44: samba-test 2:4.24.7-1.fc44 Β· GPL-3.0-or-later AND LGPL-3.0-or-later
- ubuntu noble: samba-testsuite 2:4.19.5+dfsg-4ubuntu9.8 Β· GPL-3.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms