You are troubleshooting a CIFS connection issue that is reported by some users.

 According to the NetApp Knowledge Base, packet traces are stored in the /etc/log/packet_traces directory of the node hosting the LIF. This applies to ONTAP 9.10 and above systems. For ONTAP 9.2 to 9.9 systems, the procedure to capture packet traces is similar, but the command syntax is slightly different. For ONTAP pre-9.2 systems, the procedure is different and requires the use of the tcpdump command. References = How to capture packet traces on ONTAP 9.10+ systems, How to capture packet traces (tcpdump) on ONTAP 9.2 to 9.9 systems, How to capture packet traces in ONTAP pre-9.2