2.2.5.7.1 Request

  • Article 

 Trans_Data
   {
   UCHAR WriteData[TotalDataCount];
   }
           

SMB_Parameters:

WordCount (1 byte): This field MUST be set to 0x10.

Words (32 bytes):

TotalParameterCount (2 bytes): This field MUST be set to 0x0000.

TotalDataCount (2 bytes): This field MUST be set to the total number of bytes that the client attempts to write to the named pipe in raw format.

MaxParameterCount (2 bytes): This field MUST be set to 0x0002.

MaxDataCount (2 bytes): This field MUST be set to 0x0000.

MaxSetupCount (1 byte): This field MUST be set to 0x00.

ParameterCount (2 bytes): This field MUST be set to 0x0000.

DataCount (2 bytes): This field MUST be set to the number of bytes being written to the named pipe in raw format contained in this request. If this is the only request of this transaction, the TotalDataCount field MUST equal the DataCount field.

SetupCount (1 byte): This field MUST be set to 0x02.

Setup (4 bytes):

Subcommand (2 bytes): This field MUST be set to the transaction subcommand of TRANS_RAW_WRITE_NMPIPE (0x0031).

FID (2 bytes): This field is the FID for the named pipe to read. This field MUST be set to a valid FID from a server response for a previous SMB command to open or create a named pipe. These commands include SMB_COM_OPEN, SMB_COM_CREATE, SMB_COM_CREATE_TEMPORARY, SMB_COM_CREATE_NEW, SMB_COM_OPEN_ANDX, SMB_COM_NT_CREATE_ANDX, and SMB_COM_NT_TRANSACT with subcommand NT_TRANSACT_CREATE.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Trans_Data (variable)

...

Trans_Data (variable):


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

WriteData (variable)

...

WriteData (variable): This field MUST contain the bytes to write to the named pipe in raw format. The size of the buffer MUST be equal to the value in TotalDataCount.