hi,
after the message_type(byte 0)and message flag (byte 1)fields in the smb header what is placed in bytes2 and3 of the header.as this is made use of incomputing the length of the header.
in detail,in the smb.h(ver--2.0.7) header there is a hash define for smb_len,which uses the 3,2and 1st byte
RANJANI NAGARAJAN wrote:
hi,
after the message_type(byte 0) and message flag (byte 1) fields in
the smb header what is placed in bytes 2 and 3 of the header.
You are looking at the wrong header. The structure you are looking at
is:
1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2
