encodings[0x18] = encoding // Cancel
      encodings[0x19] = encoding // End of Medium
      encodings[0x1a] = encoding // Substitute
      encodings[0x1b] = encoding // Escape
      encodings[0x1c] = encoding // File Separator
      encodings[0x1d] = encoding // Group Separator
      encodings[0x1e] = encoding // Record Separator
      encodings[0x1f] = encoding // Unit Separator
      encodings[0x7f] = encoding // Delete

        filter.init(filterConfig);

        // Test NTLM Type 1 message handling
        byte[] type1Message = new byte[] { 0x4E, 0x54, 0x4C, 0x4D, 0x53, 0x53, 0x50, 0x00, 0x01, 0x00, 0x00, 0x00 };
        String authHeader = "NTLM " + new String(org.bouncycastle.util.encoders.Base64.encode(type1Message));

        assertEquals("FFFE807F", Hexdump.toHexString(data2, 0, 8)); // 8 chars = 4 bytes

        // Test odd size (should handle correctly)
        byte[] data3 = { 0x0A, 0x0B, 0x0C };
        assertEquals("0", Hexdump.toHexString(data3, 0, 1)); // 1 char = 0.5 bytes (rounds up to 1)
        assertEquals("0A", Hexdump.toHexString(data3, 0, 2)); // 2 chars = 1 byte

        NbtAddress nbtAddress = new NbtAddress(mockName, testAddressInt, false, NbtAddress.H_NODE);
        assertEquals(NbtAddress.SMBSERVER_NAME, nbtAddress.firstCalledName());

        mockName = new Name(mockConfig, "DOMAIN", 0x1C, null); // Domain Controller
        nbtAddress = new NbtAddress(mockName, testAddressInt, false, NbtAddress.H_NODE);
        assertEquals(NbtAddress.SMBSERVER_NAME, nbtAddress.firstCalledName());

        // Add some dummy security data at offset 64 from start
        buffer[64] = (byte) 0x4E; // NTLMSSP signature start
        buffer[65] = (byte) 0x54;
        buffer[66] = (byte) 0x4C;
        buffer[67] = (byte) 0x4D;
        buffer[68] = (byte) 0x53;
        buffer[69] = (byte) 0x53;
        buffer[70] = (byte) 0x50;
        buffer[71] = (byte) 0x00;

        return buffer;
    }

        int retry = 1;

        do {
            if (this.dcListExpiration < now) {
                final Address[] list = getTransportContext().getNameServiceClient().getNbtAllByName(domain, 0x1C, null, null);
                this.dcListExpiration = now + this.netbiosCacheTimeout * 1000L;
                if (list != null && list.length > 0) {
                    this.dcList = list;

    }

    private static SpnegoToken getToken(final byte[] token) throws SpnegoException {
        SpnegoToken spnegoToken = null;
        try {
            spnegoToken = switch (token[0]) {
            case (byte) 0x60 -> new NegTokenInit(token);
            case (byte) 0xa1 -> new NegTokenTarg(token);
            default -> throw new SpnegoException("Invalid token type");
            };
            return spnegoToken;

     * RPC message for retrieving the server's time of day information.
     */
    public static class RemoteTOD extends DcerpcMessage {

        @Override
        public int getOpnum() {
            return 0x1c;
        }

        /**
         * The return value of the operation.
         */
        public int retval;
        /**
         * The name of the server.
         */

    private byte[] testMacSigningKey;

    @BeforeEach
    void setUp() {
        MockitoAnnotations.openMocks(this);
        testMacSigningKey = new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10 };
    }

    @Test
    @DisplayName("Test constructor with MAC signing key and bypass flag")
    void testConstructorWithBypass() {

        // Given & When
        int securityMode = 0x03;
        int capabilities = 0x0F;
        long previousSessionId = 0xFEDCBA9876543210L;
        byte[] token = { 0x0A, 0x0B, 0x0C };

        Smb2SessionSetupRequest req = new Smb2SessionSetupRequest(mockContext, securityMode, capabilities, previousSessionId, token);

        // Then - verify fields are set correctly using reflection