// Verify that the constructor correctly sets ptype and flags
        // These values are inherited from LsarClose, but MsrpcLsarClose sets them in its constructor
        assertEquals(0, msrpcLsarClose.getPtype(), "ptype should be 0");
        assertEquals(DcerpcConstants.DCERPC_FIRST_FRAG | DcerpcConstants.DCERPC_LAST_FRAG, msrpcLsarClose.getFlags(),
                "flags should be DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG");

        }

        if (buf[0] != 5 && buf[1] != 0) {
            throw new IOException("Unexpected DCERPC PDU header");
        }

        flags = buf[3] & 0xFF;
        // next read is start of new frag
        isStart = (flags & DCERPC_LAST_FRAG) == DCERPC_LAST_FRAG;

        length = Encdec.dec_uint16le(buf, 8);
        if (length > max_recv) {

    /**
     * Constructs a ValidateNegotiateInfo request
     *
     * @param capabilities
     *            the client capabilities flags
     * @param clientGuid
     *            the client GUID
     * @param securityMode
     *            the security mode flags
     * @param dialects
     *            the SMB dialects supported by the client
     */

        assertEquals(acctFlags, request.acct_flags, "The account flags should be set correctly.");
        assertEquals(mockSamArray, request.sam, "The sam array should be set correctly.");
        // ptype and flags are protected fields in DcerpcMessage, cannot test directly
    }

- **MS-SMB2 Section 2.2.23**: SMB2 LEASE_BREAK Notification
- **MS-SMB2 Section 2.2.24**: SMB2 LEASE_BREAK Acknowledgment

## 3. Lease Types and States

### 3.1 Lease State Flags
```java
public class Smb2LeaseState {
    // Lease state flags (can be combined)
    public static final int SMB2_LEASE_NONE           = 0x00;
    public static final int SMB2_LEASE_READ_CACHING   = 0x01;  // R - Read caching

                // need fragementation
                msg.flags &= ~DCERPC_LAST_FRAG;
                fragSize = this.max_xmit - 24;
            } else {
                msg.flags |= DCERPC_LAST_FRAG;
                msg.alloc_hint = fragSize;
            }

            msg.length = 24 + fragSize;

            if (off > 0) {
                msg.flags &= ~DCERPC_FIRST_FRAG;
            }

     *
     * @return descriptive text for the ACE scope
     */
    String getApplyToText();

    /**
     * Returns the flags for this ACE. The <code>isInherited()</code>
     * method checks the <code>FLAGS_INHERITED</code> bit in these flags.
     *
     * @return the ACE flags
     */
    int getFlags();

    /**
     * Returns true if this ACE is an inherited ACE and false if it is a direct ACE.

        // Command at +12
        SMBUtil.writeInt2(command, buf, start + 12);
        // Flags at +16: server-to-redirector
        SMBUtil.writeInt4(0x00000001, buf, start + 16);
        // SessionId at +40 (sync header)
        SMBUtil.writeInt8(sessionId, buf, start + 40);
    }

    /**
     * Build a SESSION_SETUP response body with specified flags and security blob.
     * securityBufferOffset is set relative to header start.
     */

        this.decode(buffer, bufferIndex, len);
    }

    /**
     * Gets the type flags of this security descriptor.
     *
     * @return the type flags indicating security descriptor control flags
     */
    public final int getType() {
        return this.type;
    }

    /**
     * Gets the access control entries (ACEs) from this security descriptor.

        }

        @Test
        @DisplayName("Signing flags should not overlap")
        void testSigningFlagsNoOverlap() {
            assertNotEquals(Smb2Constants.SMB2_NEGOTIATE_SIGNING_ENABLED, Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED,
                    "Signing flags must be distinct");

            // Verify they can be combined with bitwise OR