Wirehark SMB2 Trace

"\Program Files\Wireshark\tshark.exe" -r trace.pcapng -R "smb2.filename or smb2.nt_status eq 0xc0000034"

0xc0000034 = STATUS_OBJECT_NAME_NOT_FOUND