Wirehark SMB2 Trace

[sourcecode]
"\Program Files\Wireshark\tshark.exe" -r trace.pcapng -R "smb2.filename or smb2.nt_status eq 0xc0000034"
[/sourcecode]

0xc0000034 = STATUS_OBJECT_NAME_NOT_FOUND