NegTokenTarg targ = (NegTokenTarg) spToken;
            if ( targ.getResult() == NegTokenTarg.ACCEPT_COMPLETED && this.mechContext.isEstablished() ) {
                // server sent final token
                verifyMechListMIC(targ.getMechanismListMIC());
                if ( !this.disableMic || this.requireMic ) {
                    mechMIC = calculateMechListMIC();
                }

         * response will not read a batched command and therefore
         * the 'received' member of the response object will not
         * be set to true indicating the send and sendTransaction
         * methods that the next part should be sent. This is a
         * very indirect and simple batching control mechanism.
         */

                }

                synchronized (LOCK) {
                    if (NbtAddress.isWINS( request.addr ) == false)
                        break;
                                    /* Message was sent to WINS but
                                     * failed to receive response.
                                     * Try a different WINS server.
                                     */

                }

                synchronized ( this.LOCK ) {
                    if ( isWINS(request.addr) == false )
                        break;
                    /*
                     * Message was sent to WINS but
                     * failed to receive response.
                     * Try a different WINS server.
                     */
                    if ( request.addr == getWINSAddress() )

         * Looks like the failure case also is just reflecting back the signature we sent
         */

        /**
         * Maybe this is related:
         * 
         * If signing is not active, the SecuritySignature field of the SMB Header for all messages sent, except
         * the SMB_COM_SESSION_SETUP_ANDX Response (section 2.2.4.53.2), MUST be set to

     */
    public static final int NTLMSSP_NEGOTIATE_ALWAYS_SIGN = 0x00008000;

    /**
     * Sent by the server in the Type 2 message to indicate that the
     * target authentication realm is a domain.
     */
    public static final int NTLMSSP_TARGET_TYPE_DOMAIN = 0x00010000;

    /**
     * Sent by the server in the Type 2 message to indicate that the
     * target authentication realm is a server.
     */

    public boolean verifySignature ( byte[] buffer, int i, int size ) {
        // observed too that signatures on error responses are sometimes wrong??
        // Looks like the failure case also is just reflecting back the signature we sent

        // with SMB3's negotiation validation it's no longer possible to ignore this (on the validation response)
        // make sure that validation is performed in any case
        Smb2SigningDigest dgst = getDigest();

                transport.log.println( "sessionSetup: accountName=" + auth.username + ",primaryDomain=" + auth.domain );
    
            /* We explicitly set uid to 0 here to prevent a new
             * SMB_COM_SESSION_SETUP_ANDX from having it's uid set to an
             * old value when the session is re-established. Otherwise a
             * "The parameter is incorrect" error can occur.
             */

    */
    public static final int NTLMSSP_NEGOTIATE_ALWAYS_SIGN = 0x00008000;

    /**
    * Sent by the server in the Type 2 message to indicate that the 
    * target authentication realm is a domain.
    */
    public static final int NTLMSSP_TARGET_TYPE_DOMAIN = 0x00010000;

    /**
    * Sent by the server in the Type 2 message to indicate that the 
    * target authentication realm is a server.
    */

     * 
     * 1) IP Address - If a dot-quad IP string is used with getByName (or used
     * to create an NbtAddress internal to this netbios package), no query is
     * sent on the wire and the only state this object has is it's IP address
     * (but that's enough to connect to a host using *SMBSERVER for CallingName).
     * 
     * 2) IP Address, NetBIOS name, nodeType, groupName - If however a