assertEquals(0x09, ServerMessageBlock2.SMB2_WRITE);
            assertEquals(0x0A, ServerMessageBlock2.SMB2_LOCK);
            assertEquals(0x0B, ServerMessageBlock2.SMB2_IOCTL);
            assertEquals(0x0C, ServerMessageBlock2.SMB2_CANCEL);
            assertEquals(0x0D, ServerMessageBlock2.SMB2_ECHO);
            assertEquals(0x0E, ServerMessageBlock2.SMB2_QUERY_DIRECTORY);

      encodings[0x18] = encoding // Cancel
      encodings[0x19] = encoding // End of Medium
      encodings[0x1a] = encoding // Substitute
      encodings[0x1b] = encoding // Escape
      encodings[0x1c] = encoding // File Separator
      encodings[0x1d] = encoding // Group Separator
      encodings[0x1e] = encoding // Record Separator
      encodings[0x1f] = encoding // Unit Separator
      encodings[0x7f] = encoding // Delete

        filter.init(filterConfig);

        // Test NTLM Type 1 message handling
        byte[] type1Message = new byte[] { 0x4E, 0x54, 0x4C, 0x4D, 0x53, 0x53, 0x50, 0x00, 0x01, 0x00, 0x00, 0x00 };
        String authHeader = "NTLM " + new String(org.bouncycastle.util.encoders.Base64.encode(type1Message));

        assertEquals("FFFE807F", Hexdump.toHexString(data2, 0, 8)); // 8 chars = 4 bytes

        // Test odd size (should handle correctly)
        byte[] data3 = { 0x0A, 0x0B, 0x0C };
        assertEquals("0", Hexdump.toHexString(data3, 0, 1)); // 1 char = 0.5 bytes (rounds up to 1)
        assertEquals("0A", Hexdump.toHexString(data3, 0, 2)); // 2 chars = 1 byte

        // Add some dummy security data at offset 64 from start
        buffer[64] = (byte) 0x4E; // NTLMSSP signature start
        buffer[65] = (byte) 0x54;
        buffer[66] = (byte) 0x4C;
        buffer[67] = (byte) 0x4D;
        buffer[68] = (byte) 0x53;
        buffer[69] = (byte) 0x53;
        buffer[70] = (byte) 0x50;
        buffer[71] = (byte) 0x00;

        return buffer;
    }

        int retry = 1;

        do {
            if (this.dcListExpiration < now) {
                final Address[] list = getTransportContext().getNameServiceClient().getNbtAllByName(domain, 0x1C, null, null);
                this.dcListExpiration = now + this.netbiosCacheTimeout * 1000L;
                if (list != null && list.length > 0) {
                    this.dcList = list;

    // Two-byte characters
    assertWellFormed(0xC2, 0xA2, 0xC2, 0xA2); // "\u00a2\u00a2"
    // Three-byte characters
    assertWellFormed(0xc8, 0x8a, 0x63, 0xc8, 0x8a, 0x63); // "\u020ac\u020ac"
    // Four-byte characters
    // "\u024B62\u024B62"
    assertWellFormed(0xc9, 0x8b, 0x36, 0x32, 0xc9, 0x8b, 0x36, 0x32);
    // Mixed string
    // "a\u020ac\u00a2b\\u024B62u020acc\u00a2de\u024B62"

    private byte[] testMacSigningKey;

    @BeforeEach
    void setUp() {
        MockitoAnnotations.openMocks(this);
        testMacSigningKey = new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10 };
    }

    @Test
    @DisplayName("Test constructor with MAC signing key and bypass flag")
    void testConstructorWithBypass() {

        // Given & When
        int securityMode = 0x03;
        int capabilities = 0x0F;
        long previousSessionId = 0xFEDCBA9876543210L;
        byte[] token = { 0x0A, 0x0B, 0x0C };

        Smb2SessionSetupRequest req = new Smb2SessionSetupRequest(mockContext, securityMode, capabilities, previousSessionId, token);

        // Then - verify fields are set correctly using reflection

            final long now = System.currentTimeMillis();
            int retry = 1;

            do {
                if (dc_list_expiration < now) {
                    final NbtAddress[] list = NbtAddress.getAllByName(DOMAIN, 0x1C, null, null);
                    dc_list_expiration = now + CACHE_POLICY * 1000L;
                    if (list != null && list.length > 0) {
                        dc_list = list;