Partilhar via


SMB Data Fields and Properties

Properties:  

Property.SMBFileID - The File ID for any kind of SMB request

property.SMBFileID==0x4000

Property.SMBFileName - The file name for an SMB request.  This might also represent state information so frame data does not have to exist for this to be populated.

Property.SMBCommand - Represents the SMB command for the current frame.  If two SMB Commands exist, this will only represent the last one.

Property.SMBPID - Process ID for the SMB command based on the value in the SMB header.

Property.SMBStatus - SMB Status represented as a Numeric value.

Property.SMBStatus != 0

Comments

  • Anonymous
    January 01, 2003
    thanks