SMBTORTURE(1) Test Suite SMBTORTURE(1)

# [NAME](#NAME)

smbtorture - Run a series of tests against a SMB server

# [SYNOPSIS](#SYNOPSIS)

.HP 264u

**smbtorture** {//server/share} \[-d debuglevel] \[-U user%pass] \[-k] \[-N numprocs] \[-n netbios\_name] \[-W workgroup] \[-e num files(entries)] \[-O socket\_options] \[-m maximum\_protocol] \[-L] \[-c CLIENT.TXT] \[-t timelimit] \[-C filename] \[-A] \[-p port] \[-s seed] \[-f max\_failures] \[-X] {BINDING-STRING|UNC} {TEST1} \[TEST2] \[...]

# [DESCRIPTION](#DESCRIPTION)

.PP smbtorture is a testsuite that runs several tests against a SMB server. All tests are known to succeed against a Windows 2003 server (?). Smbtorture's primary goal is finding differences in implementations of the SMB protocol and testing SMB servers.

.PP Any number of tests can be specified on the command-line. If no tests are specified, all tests are run.

.PP If no arguments are specified at all, all available options and tests are listed.

.SS "Binding string format"

.PP The binding string format is:

.PP TRANSPORT:host\[flags]

.PP Where TRANSPORT is either ncacn\_np for SMB, ncacn\_ip\_tcp for RPC/TCP or ncalrpc for local connections.

.PP 'host' is an IP or hostname or netbios name. If the binding string identifies the server side of an endpoint, 'host' may be an empty string.

.PP 'flags' can include a SMB pipe name if using the ncacn\_np transport or a TCP port number if using the ncacn\_ip\_tcp transport, otherwise they will be auto-determined.

.PP other recognised flags are:

.PP sign

enable ntlmssp signing

.RE

.PP seal

enable ntlmssp sealing

.RE

.PP connect

enable rpc connect level auth (auth, but no sign or seal)

.RE

.PP validate

enable the NDR validator

.RE

.PP print

enable debugging of the packets

.RE

.PP bigendian

use bigendian RPC

.RE

.PP padcheck

check reply data for non-zero pad bytes

.RE

.PP For example, these all connect to the samr pipe:

•ncacn\_np:myserver

•ncacn\_np:myserver\[samr]

•ncacn\_np:myserver\[\\\\pipe\\\\samr]

•ncacn\_np:myserver\[/pipe/samr]

•ncacn\_np:myserver\[samr,sign,print]

•ncacn\_np:myserver\[\\\\pipe\\\\samr,sign,seal,bigendian]

•ncacn\_np:myserver\[/pipe/samr,seal,validate]

•ncacn\_np:

•ncacn\_np:\[/pipe/samr]

•ncacn\_ip\_tcp:myserver

•ncacn\_ip\_tcp:myserver\[1024]

•ncacn\_ip\_tcp:myserver\[1024,sign,seal]

•ncalrpc:

.SS "UNC Format"

.PP The UNC format is:

.PP //server/share

# [OPTIONS](#OPTIONS)

.PP -d debuglevel

Use the specified Samba debug level. A higher debug level means more output.

.RE .PP -U user%pass

Use the specified username/password combination when logging in to a remote server.

.RE .PP -k

Use kerberos when authenticating.

.RE .PP -W workgroup

Use specified name as our workgroup name.

.RE .PP -n netbios\_name

Use specified name as our NetBIOS name.

.RE

.PP -O socket\_options

Use specified socket options, equivalent of the smb.conf option “socket options”. See the [smb.conf(5)](/man/os/samba/smb.conf.5) manpage for details.

.RE

.PP -m max\_protocol

Specify the maximum SMB dialect that should be used. Possible values are: CORE, COREPLUS, LANMAN1, LANMAN2, NT1

.RE

.PP -s seed

Initialize the randomizer using *seed* as seed.

.RE

.PP -L

Use oplocks.

.RE

.PP -X

Enable dangerous tests. Use with care! This might crash your server...

.RE

.PP -t timelimit

Specify the NBENCH time limit in seconds. Defaults to 600.

.RE

.PP -p ports

Specify ports to connect to.

.RE

.PP -c file

Read NBENCH commands from *file* instead of from CLIENT.TXT.

.RE

.PP -A

Show not just OK or FAILED but more detailed output. Used only by DENY test at the moment.

.RE

.PP -C filename

Load a list of UNC names from the specified filename. Smbtorture instances will connect to a random host from this list.

.RE

.PP -N numprocs

Specify number of smbtorture processes to launch.

.RE

.PP -e num\_files

Number of entries to use in certain tests (such as creating X files) (default: 1000).

.RE

.PP -f max\_failures

Number of failures before aborting a test (default: 1).

.RE

# [VERSION](#VERSION)

.PP This man page is correct for version 4.0 of the Samba suite.

# [SEE ALSO](#SEE_ALSO)

.PP Samba

# [AUTHOR](#AUTHOR)

.PP This utility is part of the **Samba**\[1] suite, which is developed by the global **Samba Team**\[2].

.PP smbtorture was written by Andrew Tridgell.

.PP This manpage was written by Jelmer Vernooij.

# [NOTES](#NOTES)

1\.

Samba

http://www.samba.org/

2\.

Samba Team

http://www.samba.org/samba/team/

11/05/2026 Samba 4.0

---

Document: smbtorture(1) from samba 4.25.1-r1 (Chainguard OS)
Source: https://github.com/samba-team/samba