1# Samba/SMB - Server Message Block - Microsoft Windows filesharing
2# Pattern attributes: good fast notsofast
3# Protocol groups: document_retrieval networking proprietary
4# Wiki: http://www.protocolinfo.org/wiki/SMB
5#
6# "This protocol is sometimes also referred to as the Common Internet File 
7# System (CIFS), LanManager or NetBIOS protocol." -- "man samba"
8#
9# Actually, SMB is a higher level protocol than NetBIOS.  However, the 
10# NetBIOS header is only 4 bytes: not much to match on.
11#
12# http://www.ubiqx.org/cifs/SMB.html
13#
14# This pattern is lightly tested.
15
16smb
17# matches a NEGOTIATE PROTOCOL or TRANSACTION REQUEST command
18\xffsmb[\x72\x25]
19