184.108.40.206 Application Requests Writing to a File, Named Pipe, or Device
Processing of this event is handled as specified in [MS-CIFS] section 220.127.116.11 with the following additions:
The SMB_COM_WRITE_ANDX command request has been extended as specified in section 18.104.22.168.1.
Large Write Support
If the CAP_LARGE_WRITEX bit is set in Client.Connection.ServerCapabilities, then the client is allowed to issue a write of a size larger than Client.Connection.MaxBufferSize using an SMB_COM_WRITE_ANDX request. Otherwise, it MUST split the write into multiple requests to write the entire amount of data.
If the CAP_LARGE_WRITEX bit is set in Client.Connection.ServerCapabilities, and the client is issuing a write of a size larger than Client.Connection.MaxBufferSize, the client MUST ensure that the total length of the SMB packet does not exceed the maximum packet length allowed by the underlying transport, as specified in section 2.1.
If the count of bytes to be written is greater than or equal to 0x00010000 (64K), then the client MUST set the two least significant bytes of the count in the DataLength field of the request and the two most significant bytes of the count in the DataLengthHigh field.