smb_len

[Christopher R. Hertel]

RANJANI NAGARAJAN wrote:
> 
> hi,
> 
> after the message_type(byte 0) and message flag (byte 1) fields in
> the smb header what is placed in bytes 2 and 3 of the header.

You are looking at the wrong header.  The structure you are looking at
is:
                       1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3
   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |      TYPE     |     FLAGS     |            LENGTH             |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |                                                               |
  /               TRAILER (Packet Type Dependent)                 /
  |                                                               |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

which is the NBT Session Service header.  

If you are going to implement a CIFS client, you will *need* to look at:

  http://us6.samba.org/samba/docs/
  http://ubiqx.org/cifs/rfc-draft/rfc1001.html
  http://ubiqx.org/cifs/rfc-draft/rfc1002.html
  http://ubiqx.org/cifs/index.html
  http://ubiqx.org/cifs/References.html
  http://www.snia.org/English/Work_Groups/NAS/CIFS/WG_CIFS_Docs.html

...and that's just for starters.

Chris -)-----

-- 
Christopher R. Hertel -)-----                   University of Minnesota
crh at nts.umn.edu              Networking and Telecommunications Services