Has anyone been able to send a DCE-RPC PDU fragment via SMBTrans? I seem to be getting PIPE BUSY as the SMB response from the Win2K server I'm testing against. (I'm writing a DCE-RPC over SMB Named Pipes fuzzer for SPIKE) -dave