4.1 Mailslot Frame Example

The following is an example of a generic browser SMB ([MS-SMB]) that shows how a browser message is encapsulated in a TRANSACT SMB request. Note that the PID, TID, MID, UID, and flags are all 0 in mailslot  requests.

  SMB: C transact, FileName = \MAILSLOT\BROWSE
    SMB: SMB Status = No Error
      SMB: ErrorClass = No Error
      SMB: Error = No Error
    SMB: Header: TID = 0x0000 PID = 0x0000 UID = 0x0000 MID = 0x0000
      SMB: Flags = 0 (0x0)
      SMB: Flags2 = 0 (0x0)
      SMB: TreeID = 0 (0x0)
      SMB: ProcessID = 0 (0x0)
      SMB: UserID = 0 (0x0)
      SMB: MultiplexID = 0 (0x0)
    SMB: Command = C transact 
      SMB: WordCount = 17 (0x11)
      SMB: TotalParameterCount = 0 (0x0)
      SMB: TotalDataCount = 33 (0x21)
      SMB: MaxParameterCount = 0 (0x0)
      SMB: MaxDataCount = 0 (0x0)
      SMB: MaxSetupCount = 0 (0x0)
      SMB:  Flags = Do NOT disconnect TID
        SMB: Disconnect = ...............0 (Do NOT disconnect TID)
        SMB: Reserved  =   000000000000000. (Reserved)
      SMB: Timeout = 1000 milli sec(s)
      SMB: ParameterCount = 0 (0x0)
      SMB: ParameterOffset = 0 (0x0)
      SMB: DataCount = 33 (0x21)
      SMB: DataOffset = 86 (0x56)
      SMB: SetupCount = 3 (0x3)
      SMB: MailSlotsSetupWords 
        SMB: MailSlotOpcode = Write Mail Slot
        SMB: TransactionPriority = 0 (0x0)
        SMB:  MailSlotClass = Unreliable & Broadcast
      SMB: ByteCount = 50 (0x32)
      SMB: MailSlotsBuffer: 
        SMB:  FileName = \MAILSLOT\BROWSE
  BROWSER: Local Master Announcement
     BROWSER: Command = Local Master Announcement, 15(0x0F)
     BROWSER: UpdateCount = 0 (0x0)
     BROWSER: Periodicity = 720000 (12 minutes)
     BROWSER: ServerName = GERMANSHA
     BROWSER: OSVersionMajor = 5 (0x5)
     BROWSER: OSVersionMinor = 1 (0x1)
     BROWSER: ServerType = 0x00051003
     BROWSER: BrowserVersionMajor = 15 (0xF)
     BROWSER: BrowserVersionMinor = 1 (0x1)
     BROWSER: Signature = 43605 (0xAA55)
  
Show: