Goal:

I have a cifs server with two interfaces, lets call them A and B.

Connections via A are correct. Connections via B are being phased out.

Is there a cifs audit command to provide not the client or destination, but rather how the data was accessed, i.e. either through interface A or B ?