1# Samba/SMB - Server Message Block - Microsoft Windows filesharing 2# Pattern attributes: good fast notsofast 3# Protocol groups: document_retrieval networking proprietary 4# Wiki: http://www.protocolinfo.org/wiki/SMB 5# 6# "This protocol is sometimes also referred to as the Common Internet File 7# System (CIFS), LanManager or NetBIOS protocol." -- "man samba" 8# 9# Actually, SMB is a higher level protocol than NetBIOS. However, the 10# NetBIOS header is only 4 bytes: not much to match on. 11# 12# http://www.ubiqx.org/cifs/SMB.html 13# 14# This pattern is lightly tested. 15 16smb 17# matches a NEGOTIATE PROTOCOL or TRANSACTION REQUEST command 18\xffsmb[\x72\x25] 19