Microsoft Read Write Notes

 

Microsoft Registry Change

 

Locate and click the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters

On the Edit menu, click Add Value, and then add the following registry value:

Value Name: SizReqBuf

Data Type: DWORD Value

Radix: Decimal

Value: 65535

Quit Registry Editor.

 

SizReqBuf   REG_DWORD   512 to 65536 bytes

------------------------------------------

Default: 4356

Specifies the size of request buffers that the server uses. Small buffers use less memory; large buffers may improve performance.

 

 

 

 

Packet Filter Capture Offsets

SMB Read Filter

 

SMB Right Filter          2E        18

SMB Write Filter          2f         18