I tried runnig tcpdump while doing the cifsmount. Here is the output along wiht the tcpdump commnad I used:
root@grtux12# /usr/local/sbin/tcpdump -l -t -vv host 166.99.2.182
tcpdump: listening on lan0, link-type EN10MB (Ethernet), capture size 68 bytes
IP (tos 0x0, ttl 64, id 34122, offset 0, flags [DF], length: 48) grtux12.ch.etn.com.61272 > devas01.ch.etn.com.netbios_ssn: S [tcp sum ok] 3977437760:3977437760(0) win 32768
IP (tos 0x0, ttl 64, id 22510, offset 0, flags [DF], length: 48) devas01.ch.etn.com.netbios_ssn > grtux12.ch.etn.com.61272: S [bad tcp cksum b5e4 (->85e5)!] 4103948092:4103948120(28) ack 3977437761 win 8192
IP (tos 0x0, ttl 64, id 34123, offset 0, flags [DF], length: 112) grtux12.ch.etn.com.61272 > devas01.ch.etn.com.netbios_ssn: P 1:73(72) ack 1 win 32768
IP (tos 0x0, ttl 64, id 22511, offset 0, flags [DF], length: 45) devas01.ch.etn.com.netbios_ssn > grtux12.ch.etn.com.61272: P [tcp sum ok] 1:6(5) ack 73 win 32768
IP (tos 0x0, ttl 64, id 22512, offset 0, flags [DF], length: 40) devas01.ch.etn.com.netbios_ssn > grtux12.ch.etn.com.61272: FP [tcp sum ok] 6:6(0) ack 73 win 32768
IP (tos 0x0, ttl 64, id 34124, offset 0, flags [DF], length: 40) grtux12.ch.etn.com.61272 > devas01.ch.etn.com.netbios_ssn: . [tcp sum ok] 74:74(0) ack 7 win 32768
IP (tos 0x0, ttl 64, id 34125, offset 0, flags [DF], length: 40) grtux12.ch.etn.com.61272 > devas01.ch.etn.com.netbios_ssn: F [tcp sum ok] 73:73(0) ack 6 win 32768
IP (tos 0x0, ttl 64, id 22513, offset 0, flags [DF], length: 40) devas01.ch.etn.com.netbios_ssn > grtux12.ch.etn.com.61272: P [tcp sum ok] 7:7(0) ack 74 win 32768
arp who-has 166.99.82.130 tell devas01.ch.etn.com