2.2.5.2.1 Request

SMB_Parameters:

The SMB_Parameters section contains the relevant field values for the TRANS_RAW_READ_NMPIPE subcommand of the SMB_COM_TRANSACTION request.

WordCount (1 byte): The value of (0x0E) plus Words.SetupCount. This value represents the total number of SMB parameter words and MUST be 0x10.

Words (32 bytes):

TotalParameterCount (2 bytes): This field MUST be set to 0x0000 for this request.

TotalDataCount (2 bytes): This field MUST be set to 0x0000 for this request.

MaxParameterCount (2 bytes): This field MUST be set to 0x0000 for this request.

MaxDataCount (2 bytes): The value MUST be the number of bytes that the client is requesting to read from the named pipe.

MaxSetupCount (1 byte): This field MUST be set to 0x00 for this request.

Flags (2 bytes): This field SHOULD be set to 0x0000 for this request.

Timeout (4 bytes): This field SHOULD be set to 0x00000000 for this request.

ParameterCount (2 bytes): This field MUST be set to 0x0000 for this request.

DataCount (2 bytes): This field MUST be set to 0x0000 for this request.

SetupCount (1 byte): This field MUST be set to 0x02 for this request.

Setup (4 bytes):

Subcommand (2 bytes): This field MUST be set to the transaction subcommand value of TRANS_RAW_READ_NMPIPE (0x0011).

FID (2 bytes): This field is the FID for the named pipe to read. This field MUST be set to a valid FID from a server response for a previous SMB command to open or create a named pipe. These commands include SMB_COM_OPEN, SMB_COM_CREATE, SMB_COM_CREATE_TEMPORARY, SMB_COM_CREATE_NEW, SMB_COM_OPEN_ANDX, SMB_COM_NT_CREATE_ANDX, and SMB_COM_NT_TRANSACT with subcommand NT_TRANSACT_CREATE.