Ok, first off, I am *NOT* a SAMBA expert. But to me, it looks like a server side problem, which is scary, because it’s Windows 7 and MS *WROTE* the SMB specification.
Follow along with me in your PCAP file “WDLive Enter Video Folder with Hidden.pcap”
In Packet 167, the WD says “FIND_FIRST2, Pattern: \*” which means, give me a list of EVERY FILE.
In Packet 168, the server responds with:
.
…
.Office Space.avi
.Zoolander.avi
Agora.mp4
Antichrist.avi
… down to
Clerks II.mkv
In packet 169, which is a continuation of data from packet 168, it responds with:
Exit Through the Gift Shop.avi
Fantastic Mr. Fox
… down to
How to Train your Dragon.mkv (which is NOT in any of your lists?)
In packet 170, which is ANOTHER continuation of Packet 169, it responds with:
I Saw the Devil.mp4
Interview with The Vampire.avi
… down to
Muppets Christmas Carol.avi
In packet 172, the WDTV tells the server “FIND_NEXT2, Continue: Muppets Christmas Carol.avi” which means, Send me more, the last one I got was “Muppets Christmas Carol.avi”.
The server responds with Wizard People, Dear Reader.mkv.
It does NOT continue with Outbreak, as it should have. Also, in the reponse, the “END OF SEARCH” flag is set to ONE, which means that the SERVER has said “That’s all. There’s no more files.”
Now. There’s one exigent circumstance I’m not familiar with. When the WD starts the SECOND search it’s actually saying “DO NOT RESUME. This is a NEW SEARCH.” I’m not sure if that has anything to do with it or not. But even though it’s marked as a NEW SEARCH, the SERVER is still responding with the WRONG data.
So, in short, the list returned by the Server matches exactly the list shown by your WD… The Server NEVER sent the missing file names. I can’t be sure that the reason wasn’t because the WD asked the WRONG WAY, but…