SMB Data Fields and Properties


Properties: 

Property.SMBFileID – The File ID for any kind of SMB request

property.SMBFileID==0x4000

Property.SMBFileName – The file name for an SMB request.  This might also represent state information so frame data does not have to exist for this to be populated.

Property.SMBCommand – Represents the SMB command for the current frame.  If two SMB Commands exist, this will only represent the last one.

Property.SMBPID – Process ID for the SMB command based on the value in the SMB header.

Property.SMBStatus – SMB Status represented as a Numeric value.

Property.SMBStatus != 0

Comments (1)

  1. hassan sayed issa20014 says:

    thanks