assertEquals(0x10000, Smb2CreateRequest.FILE_OPEN_REQUIRING_OPLOCK);
        assertEquals(0x20000, Smb2CreateRequest.FILE_DISALLOW_EXCLUSIVE);
        assertEquals(0x100000, Smb2CreateRequest.FILE_RESERVE_OPFILTER);
        assertEquals(0x200000, Smb2CreateRequest.FILE_OPEN_REPARSE_POINT);
        assertEquals(0x400000, Smb2CreateRequest.FILE_NOP_RECALL);

        Encdec.enc_uint32le(0x00000000, temp, 4); // Reserved
        Encdec.enc_uint64le(nanos1601, temp, 8);
        System.arraycopy(clientChallenge, 0, temp, 16, 8);
        Encdec.enc_uint32le(0x00000000, temp, 24); // Unknown
        if (targetInfo != null) {
            System.arraycopy(targetInfo, 0, temp, 28, targetInfoLength);
        }
        Encdec.enc_uint32le(0x00000000, temp, 28 + targetInfoLength); // mystery bytes!

    public static final int WITNESS_HEARTBEAT = 3;

    // Common return codes from MS-SWN specification
    /** Operation completed successfully */
    public static final int ERROR_SUCCESS = 0x00000000;
    /** Invalid parameter was passed to the operation */
    public static final int ERROR_INVALID_PARAMETER = 0x00000057;
    /** Buffer provided is insufficient */

     */

    static final int FILE_OVERWRITE_IF = 0x5;

    // create options
    static final int FILE_WRITE_THROUGH = 0x00000002;
    static final int FILE_SEQUENTIAL_ONLY = 0x00000004;
    static final int FILE_SYNCHRONOUS_IO_ALERT = 0x00000010;
    static final int FILE_SYNCHRONOUS_IO_NONALERT = 0x00000020;

    // security flags
    static final int SECURITY_CONTEXT_TRACKING = 0x01;
    static final int SECURITY_EFFECTIVE_ONLY = 0x02;

    assertThat(countFrames(logs, "FINE: >> 0x00000000     8 PING          "))
      .isEqualTo(1)
    assertThat(countFrames(logs, "FINE: << 0x00000000     8 PING          "))
      .isEqualTo(1)
    assertThat(countFrames(logs, "FINE: >> 0x00000000     8 PING          ACK"))
      .isEqualTo(1)
    assertThat(countFrames(logs, "FINE: << 0x00000000     8 PING          ACK"))
      .isEqualTo(1)
  }

     *         value and the corresponding little-endian byte array.
     */
    static java.util.stream.Stream<Arguments> int32Provider() {
        return java.util.stream.Stream.of(Arguments.of(0x00000000, new byte[] { 0x00, 0x00, 0x00, 0x00 }),
                Arguments.of(0x12345678, new byte[] { 0x78, 0x56, 0x34, 0x12 }),
                Arguments.of(0xFFFFFFFF, new byte[] { (byte) 0xFF, (byte) 0xFF, (byte) 0xFF, (byte) 0xFF }),

     */

    static final int FILE_OVERWRITE_IF = 0x5;

    // create options
    static final int FILE_WRITE_THROUGH = 0x00000002;
    static final int FILE_SEQUENTIAL_ONLY = 0x00000004;
    static final int FILE_SYNCHRONOUS_IO_ALERT = 0x00000010;
    static final int FILE_SYNCHRONOUS_IO_NONALERT = 0x00000020;

    // security flags
    static final int SECURITY_CONTEXT_TRACKING = 0x01;
    static final int SECURITY_EFFECTIVE_ONLY = 0x02;

        SMBUtil.writeInt4(status, buf, start + 8);
        // Command at +12
        SMBUtil.writeInt2(command, buf, start + 12);
        // Flags at +16: server-to-redirector
        SMBUtil.writeInt4(0x00000001, buf, start + 16);
        // SessionId at +40 (sync header)
        SMBUtil.writeInt8(sessionId, buf, start + 40);
    }

    /**
     * Build a SESSION_SETUP response body with specified flags and security blob.

        // Write Command = SMB2_IOCTL (0x000B) at offset 12
        SMBUtil.writeInt2(0x000B, hdr, 12);
        // Mark as server response to be realistic (optional)
        SMBUtil.writeInt4(0x00000001, hdr, 16); // Flags = SMB2_FLAGS_SERVER_TO_REDIR
        return hdr;
    }

    // Helper: build SMB2 IOCTL response body (without header) with structureSize=49

                final SamrPolicyHandle policyHandle = new SamrPolicyHandle(handle, authorityServerName, 0x00000030);
                final SamrDomainHandle domainHandle = new SamrDomainHandle(handle, policyHandle, 0x00000200, domsid.unwrap(sid_t.class));
                try (SamrAliasHandle aliasHandle = new SamrAliasHandle(handle, domainHandle, 0x0002000c, rid)) {