only the first 2 bytes are the buffer code, the rest is command specific --metze
converted to 1.6 markup
|No differences found!|
All SMB2 command PDUs start with a buffer code that is two bytes in size.
SMB commands that return no data at all will have a buffer of only two bytes 0x02 0x00
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Length :D| | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The length in bytes of the fixed portion of the SMB command PDU.
This is a flag that indicates whether this command PDU also may contain a dynamic part. The length of the dynamic part is specific to each command opcode and stored in the fixed part of the command.
If present the dynamic part of the command PDU will follow immediately after the fixed part.