SMB transacts and Unicode strings

Richard Sharpe sharpe at
Thu Nov 25 04:29:25 GMT 1999


I had a bug in Ethereal's SMB decode where I had forgot Unicode strings in
transact names, eg \PIPE\LANMAN.

It seems that if Unicode strings are in use, there is an extra two bytes of
\0\0 after the Unicode string (even after the \0\0 terminator).

Does anyone know what they are for?

Richard Sharpe, sharpe at, Master Linux Administrator :-),
Samba (Team member,, Ethereal (Team member,
Co-author, SAMS Teach Yourself Samba in 24 Hours
Author: First Australian 5-day, intensive, hands-on Linux SysAdmin course

More information about the samba-technical mailing list