SMB Traffic Analyzer (SMBTA in the following) is a software package to monitor and create statistics about the data flow on one or more Samba servers. Statistical data can be automatically created for users, Samba services, as well as complete domains. In difference to typical network scanners, SMBTA does not listen on the network card directly. Instead a different approach has been chosen. SMBTA works from within the Virtual File System layer in Samba, runs completely transparent to the user, and transfers it’s collected data through the network to a receiver, building a SQL storage from the data.

SMB Traffic Analyzer « hhetter’s blog.