SMB Data Fields and Properties

SMB Data Fields and Properties

  • Comments 1
  • Likes

Properties: 

Property.SMBFileID - The File ID for any kind of SMB request

property.SMBFileID==0x4000

Property.SMBFileName - The file name for an SMB request.  This might also represent state information so frame data does not have to exist for this to be populated.

Property.SMBCommand - Represents the SMB command for the current frame.  If two SMB Commands exist, this will only represent the last one.

Property.SMBPID - Process ID for the SMB command based on the value in the SMB header.

Property.SMBStatus - SMB Status represented as a Numeric value.

Property.SMBStatus != 0

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment