@DisplayName("Test flags2 property")
        void testFlags2Property() {
            testBlock.setFlags2(0x1234);
            assertEquals(0x1234, testBlock.getFlags2());

            testBlock.addFlags2(0x0001);
            assertEquals(0x1235, testBlock.getFlags2());

            testBlock.remFlags2(0x0200);
            assertEquals(0x1035, testBlock.getFlags2());
        }

        @Test

    // Rate limiting
    private final Map<String, AtomicLong> rateLimitCounters = new ConcurrentHashMap<>();
    private volatile long rateLimitWindow = 60000; // 1 minute
    private volatile int maxEventsPerWindow = 10000; // Increased for tests

    /**
     * Security event types
     */
    public enum EventType {

	for i, elt := range e.Elements {
		v, err := elt.evalNode(r, tableAlias)
		if err != nil {
			return nil, err
		}
		res[i] = *v
	}
	return FromArray(res), nil
}

const floatCmpTolerance = 0.000001

func (e *In) evalInNode(r Record, lhs *Value, tableAlias string) (*Value, error) {
	// Compare two values in terms of in-ness.
	var cmp func(a, b Value) bool
	cmp = func(a, b Value) bool {
		// Convert if needed.

        Field commandField = ServerMessageBlock2.class.getDeclaredField("command");
        commandField.setAccessible(true);
        int command = (int) commandField.get(req);
        assertEquals(0x0001, command); // SMB2_SESSION_SETUP command value

        Field securityModeField = Smb2SessionSetupRequest.class.getDeclaredField("securityMode");
        securityModeField.setAccessible(true);

        // Name pointer (0xC00C)
        src[srcIndex] = (byte) 0xC0;
        src[srcIndex + 1] = 0x0C;
        // Record type (NBSTAT = 0x0021)
        src[srcIndex + 2] = 0x00;
        src[srcIndex + 3] = 0x21;
        // Record class (IN = 0x0001)
        src[srcIndex + 4] = 0x00;
        src[srcIndex + 5] = 0x01;
        // TTL (4 bytes)
        src[srcIndex + 6] = 0x00;
        src[srcIndex + 7] = 0x00;

                Arguments.of(8000L, 8000L, "8.0 kB"),
                Arguments.of(8000L, 50000L, "8.0/50 kB"),
                Arguments.of(16000L, 50000L, "16/50 kB"),
                Arguments.of(50000L, 50000L, "50 kB"),

                // Megabytes tests
                Arguments.of(0L, 5000000L, "0/5.0 MB"),
                Arguments.of(500000L, 5000000L, "0.5/5.0 MB"),
                Arguments.of(1000000L, 5000000L, "1.0/5.0 MB"),

     *
     * For Win95/98/Me this is actually the last write time. It is currently
     * not possible to retrieve the create time from files on these systems.
     *
     * @return The number of milliseconds since the 00:00:00 GMT, January 1,
     *         1970 as a <code>long</code> value
     * @throws SmbException if an error occurs while retrieving the creation time
     */
    public long createTime() throws SmbException {

            return "[" + address + "]";
        }
        return address;
    }

    /**
     * Compresses an IPv6 address string to its canonical compressed form.
     * For example, "0:0:0:0:0:0:0:1" becomes "::1"
     *
     * @param ipv6Address the IPv6 address string to compress
     * @return the compressed IPv6 address string
     */
    protected static String compressIPv6(final String ipv6Address) {

     */
    public static final int CIPHER_AES_256_CCM = 0x0003;
    /**
     * AES-256-GCM cipher identifier for SMB3.1.1 encryption (future support)
     */
    public static final int CIPHER_AES_256_GCM = 0x0004;

    /**
     * Transform header flag indicating the message is encrypted
     */
    public static final int TRANSFORM_FLAG_ENCRYPTED = 0x0001;

    /**
     * Create encryption context
     *

     */
    public static final int DFS_STORAGE_STATE_OFFLINE = 0x0001;
    /**
     * DFS storage state indicating online status
     */
    public static final int DFS_STORAGE_STATE_ONLINE = 0x0002;
    /**
     * DFS storage state indicating active status
     */
    public static final int DFS_STORAGE_STATE_ACTIVE = 0x0004;

    /**