HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/drivers/zh-TW/srv2.sys.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!�

���@ ��8.rdata�@@.rsrc� �@@x�
T88x�$��8.rdata8x.rdata$zzzdbg �.rsrc$01�&�c.rsrc$02 ��9ۧ�W[�����
�،�Z᭗�^x���0�H�P�h�������?��@��A��B�C(�D@�EX�Fp�G��H��I��J��K��L�~�0��H��`��x������������������� ��8��P��h���������� 0@P`p�������� 0@P`p������&���'��)F�d*��+���,��<.��/���0���3���6v��8�;�=��?���B��HFV��Gx�IP�hJ��@LF��M:��N<�PH�HR:��U��X���Z���\��`^�`_h��a���b���d���MUI����I�P5��Y�r��̙B�b�6���IyP���MUIzh-TWSMB Server SharesSMB Server Shares>dk�xehVƖTgo�:y SMB :O
ghVqQ(u�v�vܕnj
��� SMB :O
ghVqQ(u/fO(u SMB �
�TS�[,{ 2 Hrb�fؚHr,g@bqQ(u0Received Bytes/secReceived Bytes/sec1�pdkqQ(u�vܕ�v��Bl�c6eMOCQD}�v��s0dk<PS+T�a(uz_nj�e� SMB �
�TS�[nj�e (�Y\Sj-�)0PARequests/secRequests/sec�pdkqQ(u�c6e��Bl�v��sTree Connect CountTree Connect Count
dkqQ(u�v�vMR9j�r�v�#��}xeCurrent Open File CountCurrent Open File Count�vMR(WdkqQ(u-N��_U�v�jHh�c6R�N�xxePA4MOCQD}�_�dkqQ(u�vܕ�v SMB �jHh:O
ghV�P��vQ(u6b�z�v�k�y��s0dk<PS+Tnj�eMOCQD}��
�TS�[MOCQD}0Sent Bytes/secSent Bytes/sec-dkqQ(uKN Sent Bytes/sec � Received Bytes/sec �v=~�T0Transferred Bytes/secTransferred Bytes/sec�dkqQ(u�vܕ�Nck(WI{P SMB �jHh:O
ghVU�t�v��Blxe0Current Pending RequestsCurrent Pending Requests5�_ SMB �jHh:O
ghV�c6e0RdkqQ(u�v��Bl���Y�0R SMB �jHh:O
ghV�P�
\�a�v�V�a�pbk�@b�}wk�vs^GW�yxe0Avg. sec/RequestAvg. sec/Request�dkqQ(u�vܕ�v0U�t�v�[eQ��Blxe/�y
00Write Requests/secWrite Requests/sec-�_�c6e0RdkqQ(u�v�[eQ��Bl���Y�0R SMB �jHh:O
ghV�P�
\�a�v�V�a�pbk�@b�}wk�vs^GW�yxe0Avg. sec/WriteAvg. sec/Writenj�e�[eQ�dkqQ(u�v�k�y��s0Write Bytes/secWrite Bytes/sec�dkqQ(u�vܕ�v0U�t�v���S��Blxe/�y
00Read Requests/secPARead Requests/sec-�_�c6e0RdkqQ(u�v���S��Bl���Y�0R SMB �jHh:O
ghV�P�
\�a�v�V�a�pbk�@b�}wk�vs^GW�yxe0
Avg. sec/Read
Avg. sec/Read�_dkqQ(u���Snj�e�v�k�y��s0Read Bytes/secRead Bytes/secSMB �jHh:O
ghV�_U�R�_�Nh�vQ(u6b�z(WdkqQ(u
N��_U�v�jHhxe0Total File Open CountTotal File Open Count�p SMB �jHh:O
ghV�v(u6b�z(WdkqQ(u
N��_U�jHh�v�k�y��s0Files Opened/secFiles Opened/sec�vMR(WdkqQ(u-N��_U�v�EN�jHh�c6R�N�xxeCurrent Durable Open File CountCurrent Durable Open File Count'� SMB �jHh:O
ghV_U�R�_�dkqQ(u
N(W�fBf'`�}�#��}-N�e�_�_�S�v�EN��_Uxe0!Total Durable Handle Reopen Count!Total Durable Handle Reopen Count)� SMB �jHh:O
ghV_U�R�_�dkqQ(u
N!q�l(W�fBf'`�}�#��}-N�e�_�_�S�v�EN��_Uxe0(Total Failed Durable Handle Reopen Count(Total Failed Durable Handle Reopen Count(u6b�z��BlH_'`�v��_U=~xe~vR�k0% Resilient Handles% Resilient Handles'� SMB �jHh:O
ghV_U�R�_�dkqQ(u
N(W�fBf'`�}�#��}-N�e�_�_�S�vH_'`��_Uxe0#Total Resilient Handle Reopen Count#Total Resilient Handle Reopen Count)� SMB �jHh:O
ghV_U�R�_�dkqQ(u
N!q�l(W�fBf'`�}�#��}-N�e�_�_�S�vH_'`��_Uxe0*Total Failed Resilient Handle Reopen Count*Total Failed Resilient Handle Reopen Count(u6b�z��Bl8lEN'`�v�c6R�N�x=~xe~vR�k0% Persistent HandlesPA% Persistent Handles'� SMB �jHh:O
ghV_U�R�_�dkqQ(u
N(W�fBf'`�}�#��}-N�e�_�_�S�v8l�~��_Uxe0$Total Persistent Handle Reopen Count$Total Persistent Handle Reopen Count)� SMB �jHh:O
ghV_U�R�_�dkqQ(u
N!q�l(W�fBf'`�}�#��}-N�e�_�_�S�v8l�~��_Uxe0+Total Failed Persistent Handle Reopen Count+Total Failed Persistent Handle Reopen Count-N|~nj�e��Bl�P��dkqQ(u�v��s (�y)0Metadata Requests/secPAMetadata Requests/sec,�_6e0RdkqQ(u�v���Sb�[eQ��Bl���Y�0R SMB �jHh:O
ghVU�t��Bl�pbk�@b�}wk�vs^GW�yxe0Avg. sec/Data RequestAvg. sec/Data Request�kN���Sb�[eQ��Bl�vs^GWMOCQD}xe�v0Avg. Data Bytes/RequestAvg. Data Bytes/Request�kN���S��Bl�vs^GWMOCQD}xe�v0Avg. Bytes/ReadAvg. Bytes/Read�kN�[eQ��Bl�vs^GWMOCQD}xe�v0Avg. Bytes/WritePAAvg. Bytes/Write�pdkqQ(u�ceQGOR�vs^GW���S��Blxe�v0Avg. Read Queue LengthAvg. Read Queue Length�pdkqQ(u�ceQGOR�vs^GW�[eQ��Blxe�v0Avg. Write Queue LengthAvg. Write Queue Length�pdkqQ(u�ceQGOR�vs^GW���S�T�[eQ��Blxe�v0Avg. Data Queue LengthAvg. Data Queue Lengthnj�e�[eQ0Rb���S�dkqQ(u�v��s (�y)0Data Bytes/secPAData Bytes/sec6e0RdkqQ(uKN���Sb�[eQ��Bl�v��s (�y)0Data Requests/secData Requests/secdkqQ(u
N�vMR*gU�t�v���Sb�[eQ��Blxe�v0Current Data Queue LengthCurrent Data Queue Length�N� RDMA �dkqQ(u�vܕ�v0U�t�v�[eQ��Blxe/�y
0�N� RDMA \nj�e�[eQ�dkqQ(u�v�k�y��s0�N� RDMA �dkqQ(u�vܕ�v0U�t�v���S��Blxe/�y
0�N� RDMA �_dkqQ(u���Snj�e�v�k�y��sPA�vMR(WdkqQ(u-N��_U�v�e� CSV �jHh�c6R�N�xxe�dkqQ(u ByPassCSV �vܕ�v0U�t�v�[eQ��Blxe/�y
0�dkqQ(u ByPassCSV �vܕ�v0U�t�v���S��Blxe/�y
0-Write Requests transmitted via SMB Direct/sec-Write Requests transmitted via SMB Direct/sec*Write Bytes transmitted via SMB Direct/sec*Write Bytes transmitted via SMB Direct/sec,Read Requests transmitted via SMB Direct/sec,Read Requests transmitted via SMB Direct/sec)Read Bytes transmitted via SMB Direct/sec)Read Bytes transmitted via SMB Direct/secCurrent Bypass Open File CountCurrent Bypass Open File Count,Write Requests transmitted via BypassCSV/sec,Write Requests transmitted via BypassCSV/sec+Read Requests transmitted via BypassCSV/sec+Read Requests transmitted via BypassCSV/sec$Read Bytes transmitted ByPassCSV/sec$Read Bytes transmitted ByPassCSV/sec�_dkqQ(u ByPassCSV ���Snj�e�v�k�y��snj�e�[eQ�dkqQ(u ByPassCSV �v�k�y��s%Write Bytes transmitted ByPassCSV/sec%Write Bytes transmitted ByPassCSV/sec�N��}P8�MR��k�y�X.~�vMOCQD}xeBytes Compressed/secPABytes Compressed/sec�N��}P8�MR��k�y�X.~�v SMB �V�axeCompressed Responses/secCompressed Responses/sec�k�y�N��}c6e�v�]�X.~ SMB ��BlxeCompressed Requests/secCompressed Requests/secPA0dk�xehVƖTgo�:yO(u SMB �
�TS�[,{ 2 Hrb�fؚHr,g�v SMB :O
ghV�]\O���k�v�vܕnj
�SMB Server SessionsSMB Server Sessions2�pdk�]\O���k-N�v��Bl�c6eMOCQD}�v��s0dk<PS+T�a(uz_nj�e� SMB �
�TS�[nj�e (�Y\Sj-�)0Received Bytes/secReceived Bytes/sec
dk�]\O���k-N�c6e��Bl�v��sRequests/secRequests/secdk�]\O���k-N�v9j�r�v�#��}xeTree Connect CountTree Connect Count�vMR(Wdk�]\O���k-N��_U�v�jHh�c6R�N�xxeCurrent Open File CountCurrent Open File Count3MOCQD}(Wdk�]\O���k-N�_ SMB �jHh:O
ghV�P��(u6b�z�v�k�y��s0dk<PS+Tnj�eMOCQD}��
�TS�[MOCQD}0Sent Bytes/secSent Bytes/sec/dk�]\O���kKN Sent Bytes/sec � Received Bytes/sec �v=~�T0Transferred Bytes/secTransferred Bytes/secdk�]\O���k-Nck(WI{P SMB �jHh:O
ghVU�t�v��Blxe0Current Pending RequestsPACurrent Pending Requests8�_ SMB �jHh:O
ghV(Wdk�]\O���k-N�c6e0R��Bl���Y�0R SMB �jHh:O
ghV�P�
\�a�v�V�a�pbk�@b�}wk�vs^GW�yxe0Avg. sec/RequestAvg. sec/Requestdk�]\O���k-N�k�yU�t�v�[eQ��Blxe0Write Requests/secPAWrite Requests/sec0�_�c6e0Rdk�]\O���k-N�v�[eQ��Bl���Y�0R SMB �jHh:O
ghV�P�
\�a�v�V�a�pbk�@b�}wk�vs^GW�yxe0Avg. sec/WriteAvg. sec/Write(Wdk�]\O���k-N�[eQnj�e�v�k�y��s0Write Bytes/secWrite Bytes/secPAdk�]\O���k-N�k�yU�t�v���S��Blxe0Read Requests/secRead Requests/sec0�_�c6e0Rdk�]\O���k-N�v���S��Bl���Y�0R SMB �jHh:O
ghV�P�
\�a�v�V�a�pbk�@b�}wk�vs^GW�yxe0
Avg. sec/Read
Avg. sec/Read(Wdk�]\O���k-N���Snj�e�v�k�y��s0Read Bytes/secRead Bytes/sec!SMB �jHh:O
ghV�_U�R�_�Nh�vQ(u6b�z(Wdk�]\O���k-N��_U�v�jHhxe0Total File Open CountTotal File Open Count(Wdk�]\O���k-N��_U�jHh�v�k�y��s0Files Opened/secFiles Opened/sec�vMR(Wdk�]\O���k-N��_U�v�EN�jHh�c6R�N�xxeCurrent Durable Open File CountCurrent Durable Open File Count)� SMB �jHh:O
ghV_U�R�_�dk�]\O���k-N(W�fBf'`�}�#��}-N�e�_�_�S�v�EN��_Uxe0!Total Durable Handle Reopen Count!Total Durable Handle Reopen Count+� SMB �jHh:O
ghV_U�R�_�dk�]\O���k-N!q�l(W�fBf'`�}�#��}-N�e�_�_�S�v�EN��_Uxe0(Total Failed Durable Handle Reopen Count(Total Failed Durable Handle Reopen Count(u6b�z��BlH_'`�v��_U=~xe~vR�k0% Resilient Handles% Resilient Handles)� SMB �jHh:O
ghV_U�R�_�dk�]\O���k-N(W�fBf'`�}�#��}-N�e�_�_�S�vH_'`��_Uxe0#Total Resilient Handle Reopen Count#Total Resilient Handle Reopen Count+� SMB �jHh:O
ghV_U�R�_�dk�]\O���k-N!q�l(W�fBf'`�}�#��}-N�e�_�_�S�vH_'`��_Uxe0PA*Total Failed Resilient Handle Reopen Count*Total Failed Resilient Handle Reopen Count(u6b�z��Bl8l�~'`�v��_U=~xe~vR�k0% Persistent Handles% Persistent Handles)� SMB �jHh:O
ghV_U�R�_�dk�]\O���k-N(W�fBf'`�}�#��}-N�e�_�_�S�v8l�~��_Uxe0$Total Persistent Handle Reopen Count$Total Persistent Handle Reopen Count+� SMB �jHh:O
ghV_U�R�_�dk�]\O���k-N!q�l(W�fBf'`�}�#��}-N�e�_�_�S�v8l�~��_Uxe0+Total Failed Persistent Handle Reopen Count+Total Failed Persistent Handle Reopen CountPA(Wdk�]\O���k-N�P�-N|~nj�e��Bl�v�k�y��s0Metadata Requests/secMetadata Requests/sec.�_6e0Rdk�]\O���k�v���Sb�[eQ��Bl���Y�0R SMB �jHh:O
ghVU�t��Bl�pbk�@b�}wk�vs^GW�yxe0Avg. sec/Data RequestAvg. sec/Data Request�kN���Sb�[eQ��Bl�vs^GWMOCQD}xe�v0Avg. Data Bytes/RequestAvg. Data Bytes/Request�kN���S��Bl�vs^GWMOCQD}xe�v0Avg. Bytes/ReadAvg. Bytes/Read�kN�[eQ��Bl�vs^GWMOCQD}xe�v0Avg. Bytes/WriteAvg. Bytes/Write(Wdk�]\O���k-N�ceQGOR�vs^GW���S��Blxe�v0Avg. Read Queue LengthAvg. Read Queue Length(Wdk�]\O���k-N�ceQGOR�vs^GW�[eQ��Blxe�v0Avg. Write Queue LengthAvg. Write Queue Length(Wdk�]\O���k-N�ceQGOR�vs^GW���S�T�[eQ��Blxe�v0PAAvg. Data Queue LengthAvg. Data Queue Length(Wdk�]\O���k-NKNnj�e�[eQb���S�v�k�y��s0Data Bytes/secData Bytes/sec(Wdk�]\O���k-N�c6e���Sb�[eQ��Bl�v�k�y��s0Data Requests/secData Requests/sec(Wdk�]\O���k-N�v�vMR�_U�t���Sb�[eQ��Blxe�v0Current Data Queue LengthCurrent Data Queue Length+0SMB :O
ghV
0He���xehVg,nϑ SMB �
�TS�[,{ 2 Hrb�f�eHr�v�jHh:O
ghV;m�R
SMB Server
SMB Server#Read Bytes/sec /f�n�� SMB ���S��Bl�vnj�e���S��s0Read Bytes/secRead Bytes/sec"Read Requests/sec /f�c6e SMB ���S��Bl�v��s0Read Requests/secRead Requests/sec$Write Bytes/sec /f�n�� SMB �[eQ��Bl�vnj�e�[eQ��s0Write Bytes/secWrite Bytes/sec#Write Requests/sec /f�c6e SMB �[eQ��Bl�v��s0Write Requests/secWrite Requests/sec;Send Bytes/sec /f�}�
N�P�nj�e�v��s0dk<PS+T�a(uz_nj�e� SMB �
�TS�[nj�e (�O�Y\Sj-�)0Send Bytes/secSend Bytes/sec>Receive Bytes/sec /f�_�}c6enj�e�v��s0dk<PS+T�a(uz_nj�e� SMB �
�TS�[nj�e (�O�Y\Sj-�)0Receive Bytes/secReceive Bytes/sec!55�00�	0	0�PP�������l�����&�+��X�[�<�����	���������`���x���Kl�q��N�����R�����R�����S����<T@��@���X'�'��X����<[�����]���`����c�����d��xee�j�jl�q�lks�z��l'�'�|n����q�T� r=z8h1YWe

nj
�

���Y

\Pbk

�P�

/���

f�JT

nj
�

XMicrosoft-Windows-SMBServer/Performance

TMicrosoft-Windows-SMBServer/Analytic

XMicrosoft-Windows-SMBServer/Operational

XMicrosoft-Windows-SMBServer/Diagnostic

TMicrosoft-Windows-SMBServer/Security

\Microsoft-Windows-SMBServer/Connectivity

LMicrosoft-Windows-SMBServer/Audit

PSMB2 Work Item Component Transition

<SMB2 Work Item allocated

8SMB2 Work Item released

PSMB2 Work Item activity id transfer

\SMB2 Work Item external activity id stop

<SMB2 Connection accepted

TSMB2 Connection Disconnected by Peer

@SMB2 Connection Terminated

8SMB2 Session Allocated

PSmb Session Authentication Failure

PSMB2 Session Authentication Success

LSMB2 Session Bound to Connection

8SMB2 Session Terminated

4SMB2 Session Closed.

@SMB2 TreeConnect Allocated

DSMB2 TreeConnect Disconnected

@SMB2 TreeConnect Terminated

�SMB2 TreeConnect Failed due to Cluster Endpoint Initializing

4SMB2 Open established

PSMB2 Open Disconnected - Preserved

4SMB2 Open Reconnected

HSMB2 Open Suspended - Preserved

,SMB2 Open Closed

0SMB2 Open Timed Out

4SMB2 Open Terminated

`SMB2 Open Clustered Client Failover Closed

`�jHh "%8\%2" �v�jHh�c6R�N�x�]1uO(u� %4 (�O��f� %6) $R�[�p!qHe

,SMB2 Share Added

0SMB2 Share Modified

0SMB2 Share Deleted

�S4U2Self W�I�1YWe - (u6b�z!q�lO(u S4U2Self ͑�eW�I��N�S�_�[JT0�3^6b&N^��}�W3^6b�sS�S��|vu�.z�`�l0

PSRV \P(u - SMB1 �N�m��Bl1YWe��S�V/f SMB1 �]\P(u0

XRKF 1YWe - SRV2 !q�l�S�_c�~'`�c6R�N�x��BlKN|~�~ёp��{x��v���S0

�dk:O
ghV6e0R�O�(u6b�z %4 �v*g�R�[
�o`0
�o`�]���bU}0%n%nc:y: %n%ndk�N�Nc�QsSO SMB qQ(u��Bl�R�[�(u6b�z��/f�P�*g�R�[nj�e0

�:O
ghV�c6e0R�O�(u6b�z %2 �v
Nck�x=|r�v
�o`0
�o`�]���bU}0%n%nc:y: %n%ndk�N�Nc�Q(u6b�zck(W�P��v��Bl�}N�
Nck�x=|r0

@dk:O
ghV!q�lW�I��O�(u6b�z %2 �v�N�m0#��}�]B}bk0

�qQ(u�bU}
\(u6b�z�vX[�S0%n%n(u6b�z
T1z: %10%n(u6b�zMO@W: %6%nO(u�
T1z: %8%n�]\O���kX�%R�x: %17%nqQ(u
T1z: %2%nqQ(u_: %4%n�rKa: %16 (%15)%n
\�a�vX[�S: %11%n�c��vX[�S: %12%n�[hQ'`�c�CQ: %14%n%nc:y: %n%nvu;NԚ(W�l	g�_��
kP��v�`�lNX[�SqQ(uBf��`�ar��gg|vu�bU}X[�S/���0��8^h�:y;NԚ�l	g�v�c�v�[hQ'`
kP�b�*g�ReQwQ	g�v�cX[�S
kP��v�D}0傁�$R�e&N�fck@bc�[qQ(u
N�v
kP���|q}�{t�T�S�NO(u [�jHh=~�{gQ�[] 
\q��eJX-N�v [�[hQ'`] "}_jd|0SMBSHARE Windows PowerShell !jD}b NET SHARE }T�N0�`_N�S�NO(u [�jHh=~�{] -N�v [	gHeX[�S
k] "}_jd|�OTS�R:��edkOUL�0%n%n�Y�g�a(uz_Vf�HQ�N�S�[eQ!j_��_U�jHh�6q�_�N/U��!j_͑�e��_U�jHh�GR�S��g"uu�bU}X[�S/���0(Wdk�`�lN�
N���O(u��WL��R\O0%n%n�Y�g
\qQ(u�vX[�Sm��bU}��N*g��dk�N�N��`�S�N�j�g�jHh�Tnj�e>Y NTFS/REFS 
kP�0%n%ndk/���
Nh�:y|vuW�I�OUL���Sh�:y	g�c
kOUL�0

�qQ(u�bU}
\(u6b�z�v?S
TX[�S0%n%n(u6b�z
T1z: %8%n(u6b�zMO@W: %6%nqQ(u
T1z: %2%nqQ(u_: %4%n%nc:y: %n%nvu(u6b�zVf�#��}�qQ(u�FO*g�c�O�NUO��I�Bf��`�ar��gg|vudk/���0�h�:y(u6b�z*g�c�OO(u�
T1z (�N�S�_��Bf�v�}�W��I�)0�-�g�bU}
\qQ(u�v?S
TX[�S0%n%ndk/���
NN�_h�:y|vu�c
kOUL��;N��h�:y|vuW�I�OUL�0��8^���e^� Windows (u6b�z0

�:O
ghV�bU}
\(u6b�z�v?S
TX[�S0%n%n(u6b�z
T1z: %4%n (u6b�zMO@W: %2%n�]\O���kX�%R�x: %5%n%nc:y: %n%nvu(u6b�zVf�#��}�qQ(u�FO*g�c�O�NUO��I�Bf��`�ar��gg|vudk/���0�h�:y(u6b�z*g�c�OO(u�
T1z (�N�S�_��Bf�v�}�W��I�)0Windows Server �-�g�bU}
\qQ(u�v?S
TX[�S0%n%ndk/���
NN�_h�:y|vu�c
kOUL��;N��h�:y|vuW�I�OUL�0��8^���e^� Windows (u6b�z0

��]�e�X�zޞ0%n%n
T1z: %2%n�}�W
T1z: %4%n�P8�
T1z: %6%n�P8��ej: %7%n%nc:y: %n%nvu:O
ghV���Y�c}��Nb� (�O�Y��|q}͑�e_U�Rg��b_U(u�}��Nb�aSBf)��`�ar��gg|vudk�N�N0
N���O(u��WL��R\O0

��]�yd��zޞ0%n%n
T1z: %2%n�}�W
T1z: %4%n�P8�
T1z: %6%n%nc:y: %n%nvu:O
ghV\Pbk�c}��Nb� (�O�Y�ܕ_jg��b\P(u�}��Nb�aSBf)��`�ar��gg|vudk�N�N0
N���O(u��WL��R\O0

@�}�
T1znj
��]���f0%n%n���f^��W: %1%n�}�
T1z: %3%nIP MO@W: %9%n�ej: %4%n�Nb�"}_: %5%n�[ϑ: %6%n#�P}��^: %7%n%nc:y: %n%n(W�[/��yI�\Omig��0�|q}_U�RBfb�}�-��[g����`�ar��g Windows �[/��yI��SƖ�{ޞ
Ng|vudk�N�N0
N���O(u��WL��R\O0

��zޞ
N�}0%n%n�zޞ
T1z: %2%n�P8�
T1z: %4%n%nc:y: %n%n(W�[/��yI�\Omig����`�ar��g Windows �[/��yI��SƖ�{ޞ
Ng|vudk�N�N0
N���O(u��WL��R\O0

��zޞ��}0%n%n�zޞ
T1z: %2%n�P8�
T1z: %4%n%nc:y: %n%n(W�[/��yI�\Omig����`�ar��g Windows �[/��yI��SƖ�{ޞ
Ng|vudk�N�N0
N���O(u��WL��R\O0

��[|T�S1YWe0%n%n(u6b�z
T1z: %2%n(u6b�zMO@W: %4%n�]\O���kX�%R�x: %7%n�rKa: %6 (%5)%n%nc:y: %n%ndk�N�N�v|vu�S�V�8^/fMRNP SMB �]\O���k
N�QX[(W0�SNP|vu�S�V/f�\S�V�pG�0R/���b0e*b_
0;e�d�(W��f����v�}�
Nm�0R�f9e0

�͑�e��_U1YWe0%n%n(u6b�z
T1z: %7%n(u6b�zMO@W: %9%nO(u�
T1z: %13%n�]\O���kX�%R�x: %14%nqQ(u
T1z: %11%n�jHh
T1z: %16%n|~�~ёp�: %20%n�rKa: %2 (%1)%nRKF �rKa: %4 (%3)%n�EN: %17%nb`�_: %18%nc�~: %19%n�S�V: %21%n%nc:y: %n%n(u6b�zVf�͑�e��_Uc�~�S(u�v�c6R�N�xFO1YWe0��8^h�:y�}�b̀�_��͑�e��_U�v�jHh|vuOUL�0

|�]nt�c6R�N�x0%n%nqQ(u
T1z: %7%n�jHh
T1z: %9%n|~�~ёp�: %5%nc�~�jHhX�%R�x: %3%n�RKa�jHhX�%R�x: %4%n�EN: %1%nb`�_bc�~: %2%n%nc:y: %n%n:O
ghV�](W 60 �y�_ܕ��HQMR�p(u6b�z�OYu�v�c6R�N�x0(Wc�~�S(uFO(u6b�z*g�Nck8^ܕ���]\O���k�v��f�
N��`�ar��gg|vudk�N�N0�O�Y�vu(u6b�zaY͑�e_U�RBf�1\�S��g|vudk�N�N0

��]�[b�]\O���k�v�_����_W�I�0%n%n�]\O���kX�%R�x: %1%n�rKa: %3 (%2)%n�]\O�rKa: %5 (%4)%n%nc:y: %n%n(Wc�~�S(u�v��f�
N��`�ar��gg|vudk�N�N0
N���O(u��WL��R\O

��]�[b�jHh�v�_����_W�I�0%n%n|~�~ёp�: %1%n�rKa: %3 (%2)%n�]\O�rKa: %5 (%4)%n%nc:y: %n%n(Wc�~�S(u�v��f�
N��`�ar��gg|vudk�N�N0
N���O(u��WL��R\O

h�jHh�|q}\Omi@b���vBf�����Q�g0%n%n(u6b�z
T1z: %8%n(u6b�zMO@W: %10%nO(u�
T1z: %6%n�]\O���kX�%R�x: %3%nqQ(u
T1z: %12%n�jHh
T1z: %14%n}T�N: %1%ng�� (�k�y): %15%nf�JT��<P (�k�y): %16%n%nc:y: %n%n�Wy�jHh�|q}���N*Yw�Bf���O�V�a\Omi0��8^h�:y2QX[Ԛ|vuOUL���^� SMB0

lLmCompatibilityLevel <P��-�<P
NT0%n%n�]-��[ LM �v�['`d\}: %1%n�-� LM �v�['`d\}: %2%n%nc:y: %n%nLAN Manager (LM) W�I�/f(u�O
\ Windows (u6b�zW�I��}�\Omi�v�
�TS�[0��N\OmiS�b�ReQ�}�W0X[�S�}�nj�n�N�SW�I�O(u�b��f�0��Szl�[(W(u6b�z�:O
ghV��f�KN���N�m�vc0b/�V�aW�I��
�TS�[0f�x���LM W�I�d\}gzl�[(u6b�z@b\Vf��N�mb:O
ghV@b\�c�S�vW�I��
�TS�[0�p LmCompatibilityLevel -��[�v<P�gzl�[�}�{veQ@bO(u�vc0b/�V�aW�I��
�TS�[0dk<Pgq_��(u6b�z@bO(u�vW�I��
�TS�[d\}0�N�m�v�]\O���k�[hQ'`d\}��N�S:O
ghV@b�c�S�vW�I�d\}0%n%n<P (-��[) - �c�%n%n0 (�P� LM � NTLM �V�a) - (u6b�zgO(u LM � NTLM W�I��NN�_
NO(u NTLMv2 �]\O���k�[hQ'`0�}�W�c6R�z�c�S LM0NTLM �T NTLMv2 W�I�0%n%n1 (�P� LM �T NTLM - �Y�g�N�m�GRO(u NTLMv2 �]\O���k�[hQ'`) - (u6b�zgO(u LM �T NTLM W�I��&N(W:O
ghV/e�cBfO(u NTLMv2 �]\O���k�[hQ'`0�}�W�c6R�z�c�S LM0NTLM �T NTLMv2 W�I�0%n%n2 (�P�P� NTLM �V�a) - (u6b�z�SgO(u NTLM W�I��&N(W:O
ghV/e�cBfO(u NTLMv2 �]\O���k�[hQ'`0�}�W�c6R�z�c�S LM0NTLM �T NTLMv2 W�I�0%n%n3 (�P�P� NTLM v2 �V�a) - (u6b�z�SgO(u NTLMv2 W�I��&N(W:O
ghV/e�cBfO(u NTLMv2 �]\O���k�[hQ'`0�}�W�c6R�z�c�S LM0NTLM �T NTLMv2 W�I�0%n%n4 (�P�P� NTLMv2 �V�a/�bU} LM) - (u6b�z�SgO(u NTLMv2 W�I��&N(W:O
ghV/e�cBfO(u NTLMv2 �]\O���k�[hQ'`0�}�W�c6R�zg�bU} LM � NTLM���P�c�S NTLMv2 W�I�0%n%n5 (�P�P� NTLM v2 �V�a/�bU} LM � NTLM) - (u6b�z�SgO(u NTLMv2 W�I��&N(W:O
ghV/e�cBfO(u NTLMv2 �]\O���k�[hQ'`0�}�W�c6R�zg�bU} LM �T NTLM &NN�S�c�S NTLMv2 W�I�0%n%n(u6b�z�:O
ghV
N-��[�v LmCompatibility d\}|_dk
N�v�[ (�O�Y(u6b�z
N�p 0�:O
ghV
N�p 5)�g �b!q�lX[�S:O
ghV0^� Microsoft (u6b�z�T:O
ghV_Ng�c�O��ND}Ka-��[0

��]_U(u�jHh�SpSh�_jqQ(u2�kpFr��GR0%n%nc:y: %n%nvu Windows 2�kpFr-��[b_U(u [�jHh�SpSh�_jqQ(u] ��GR (dkgAQ1�SMB Amϑ2�eQ) Bf��`�ar��gg|vudk�N�N0dk�N�Ng|vu(W-�	g��qQ(u�v��f�
N0

dk:O
ghV
N�vNPbYP�s	gqQ(u�]_U(uX[�S�WR	�0%n%nc:y: %n%nvuO(u [:O
ghV�{t�T] b Set-SmbShare Windows PowerShell Cmdlet (WNPbYPqQ(u
N_U(uX[�S�WR	�Bf��`�ar��gg|vudk�N�N0vu(u6b�z#��}�qQ(u��r�qQ(u@b+T�vnj�e>YS+TO(u��l	gX[�S
k�v1�Y
\I{��vd\}nj�n�GRX[�S�WR	��S��gO CPU O(u�s�cؚ0�`�S�N(W Windows {v�-N-��[ ABELevel <P�O�c6R CPU O(u�s:%n%nHKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\ABELevel [DWORD]%n%n�`�S�N\ ABELevel �v<P-��p�f'Y�v�m�^�On\ CPU ��w��FO�#jZPgM�NOX[�S�WR	��v	gHe'`:%n%n<P = 0: 
\@b	gd\}_U(uX[�S�WR	�%n%n<P = 1: 
\�m�^ 1 _U(uX[�S�WR	� (�{�O: \server\share)%n%n<P = 2: 
\�m�^ 2 _U(uX[�S�WR	� (�{�O: \server\share\folder)%n%n�`�S�N|~�~�pYP�m�^d\}�O-��[<P0

�dk:O
ghV
N�]\P(u SMB2 �T SMB30�#jg\�R��'`�THe��M�NO0%n%n{v�_j�x: HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters%n{v�<P: Smb2%n�-�<P: 1 (b
NX[(W)%n�vMR<P: 0%n%nc:y: %n%n\P(u SMB2/SMB3 Bf��`�ar��gg|vudk�N�N0Microsoft 
N�^p�\P(u SMB2/SMB30\P(u SMB3 Bf��`!q�lO(u SMB Transparent Failover0SMB Scale Out0SMB Multichannel0SMB Direct (RDMA)0SMB Encryption0VSS for SMB �jHhqQ(u�T SMB Directory Leasing �^��R��0(W'Y�R�`�lN�SMB �c�O�u㖒c��V�a�c�e�O�N�f\P(u SMB2/SMB30ˊO(u Set-SmbServerConfiguration Windows PowerShell Cmdlet �O_U(u SMB2/SMB30

�NPbYPwQ
T�{S�bqQ(u�]j��p�O?S
TO(u�X[�S0�#jgAQ1�*gW�I��vO(u�#��}�dk:O
ghV�O��f��v�[hQ'`�����X�R0%n%n{v�_j�x: HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters%n{v�<P: NullSessionPipes0NullSessionShares%n�-�<P: zz}v (b
NX[(W)%n�vMR<P: ^�zz}v%n%nc:y: %n%n�O9e NullSessionShares �T NullSessionPipes �v�-�<PBf��`�ar��gg|vudk�N�N0(WN,��jHh:O
ghV
N���N-��[&N
NX[(Wb
NS+T<P��Ydk/fg�[hQ�v-��[0�}�W�c6R�z�-�g(W NullSessionShares ��v-NkXeQ netlogon0samr �T lsarpc��NAQ1�
�_X[�S�e�l0

4�]
\ SMB2 �T SMB3 �
�TS�[\P(u�jHh�y(u0�#jgM�NO�R��'`�N�S��gM�NOHe��0%n%n{v�_j�x: HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters%n{v�<P: DisableLeasing%n�-�<P: 0 (b
NX[(W)%n�vMR<P: ^���%n%nc:y: %n%n\P(u SMB 3 Leasing Bf��`�ar��gg|vudk�N�N0Microsoft 
N�^p�\P(u SMB Leasing0\P(uKN�_��S���V�p
N�Q�_,g_j�_�S-N�d�S-N|~nj�e�Tnj�e��O�_�_(u6b�z0R:O
ghV�vAmϑ�X�R0

x�vMR�]ܕ���jHh�SpSh�_jqQ(u2�kpFr#��c�W0
\�e*gR�NgQ�[�v�|q}b/flQ(u�}�
N�v�|q}��/f�-�-��[0%n%nc:y: %n%nvu Windows 2�kpFr*g-��[b_U(u [�jHh�SpSh�_jqQ(u] ��GR (dkgAQ1� SMB Amϑ2�eQ) Bf��`�ar��gg|vudk�N�N0dk�N�Ng|vu(W*g-�	g��qQ(u�v��f�
N0d�^�AQ1� SMB Amϑ�N�2�kpFr�&TGR(u6b�z!q�lX[�Sdk��f�
N�v SMB qQ(u0

��SƖ/e�c�v SMB �e�g'Y<P�]���f0%n%nNewMaxDialect: %1%nOldMaxDialect: %2%n%nc\�eݑ:%n%n(W Windows �[/��yI��SƖGS}g���g|vudk�N�N0
N���O(u��c�S�NUO�R\O0

�0�R�[WY�N��^
0�D}�SGR-��[!qHe0%n%nc\�eݑ:%n%ndk�N�Nh�:y�|q}�{t�T-��[�v0��f�-��[\�|q}�{t�{,g\�}�\Lanman :O
ghV\�R�[WY�N��^
0�D}�SGR-��[!qHe0(W�zldk/���KNMR�:O
ghV\O(u�-��v�R�[WY�N��^ "%1"0

�MDL ���Sb�[eQ�[b��Bl1YWe0%n%n:O
ghV
T1z: %2%nqQ(u
T1z: %4%n�jHh
T1z: %6%nIsRead: %7%n�rKa: %8%n%nc\�eݑ:%n%nvu�[b�]2�L��}]�U�t�v I/O �Nˑ>e�|q}nj�nBf�SMB :O
ghVg\ MDL �[b��Bl�P�0R�jHh�|q}0�jHh�|q}�vQ�{x�hVE��Rz_
N�_�� MDL �[b��Bl1YWe01YWe�S��g\���aԚAm1Y�&N �b�|q}He���iz�['`M�NO0^� Microsoft �jHh�|q}�{x�hVE��Rz_/f MDL �[b��Bl1YWeg8^���v�S�V0

d:O
ghVuP,n0ROUL���N�]�d�SsSBf8h�_�PpS�N6eƖuP/�nj
�0%n%n�S�V: %1%n�PpSMOn: %SystemRoot%\LiveKernelReports%n%nc\�eݑ:%n%n:O
ghV/e�c0sSBf�PpS
0�R���vQ-NOUL�uP,ng\�8h�_��aԚ�PpS�FO
Ng	g/����j�g�͑�e��_j0�#j�S��0Microsoft /e�c
g�R
0(W
N���BlO(u�͑�e��_jbKb�R�NeQ�v�`�lN�j�g��aԚ�PpS0t1u�N�xc�QuP,n0R�vOUL�^��W0%n%n�]!q�V�a�v I/O%n%nI/O ���NN�w��vBf���[b0�R��
Nck8^�vTS�R�^FU�jHh�|q}��`O�{x�hVE��Rz_/fdkOUL��v8^���O�n0vQ�N�S�VS�bEe���v�x�xb'YE^��N�:O
ghVU�t���R�v(u6b�z\T I/O �]\O��	�0

L:O
ghVuP,n0ROUL��FO!q�l�d�SsSBf8h�_�PpS�N6eƖuP/�nj
�0%n%n�S�V: %1%n%nc\�eݑ:%n%n:O
ghV/e�c0sSBf�PpS
0�R���vQ-NOUL�uP,ng\�8h�_��aԚ�PpS�FO
Ng	g/����j�g�͑�e��_j0�#j�S��0Microsoft /e�c
g�R
0(W
N���BlO(u�͑�e��_jbKb�R�NeQ�v�`�lN�j�g��aԚ�PpS0t1u�N�xc�QuP,n0R�vOUL�^��W0(WdkHh�O-N�:O
ghV�^�zsSBf8h�_�PpS�v��Bl�]���bU}0��8^/f�V�psSBf8h�_�PpS�{Am�dk�R��g2�bk;�A~�v�PpS�(u*YY�x�xzz��0ˊI{P�{AmP�6R0Rg (�-�<P/f 7 )Y)�b#�a}0Microsoft /e�c
g�R
0�N�S�_���[�{Am�vek_�0dk�N�NN)YgY�Sg�[eQN!k���j0\�:O
ghV��BlsSBf8h�_�PpS�vOUL��S��g�f;�A~0W|vu0%n%n�]!q�V�a�v I/O%n%nI/O ���NN�w��vBf���[b0�R��
Nck8^�vTS�R�^FU�jHh�|q}��`O�{x�hVE��Rz_/fdkOUL��v8^���O�n0vQ�N�S�VS�bEe���v�x�xb'YE^��N�:O
ghVU�t���R�v(u6b�z\T I/O �]\O��	�0

tSent RDMA %1 event to LanmanServer for interface %3.

dSend RDMA Endpoint notification failure - %1

\RDMA Endpoint %4 for interface %2 was %1.

�RDMA Endpoint allocation failure - Endpoint allocation failed for interface %1. %2

PRDMA listener creation failure - %1

�RDMA Send endpoint notification RPC failure for device %3 - %1

�Received Nsi notification type %1 for interface %2 with NdkOperationalState %3

pReceived Mib notification type %1 for interface %2

X�_{v����S FSCTL l\'`Bf|vu/���0\euN�{v�<P��v %30/���: %1

�:O
ghV�v�aI�sS\0Rg0%n%n;NԚ�%2%nc}�%4%n�e %5 0Rg0%n%nc\�eݑ�%n%n�h�:y�aI�sS\0Rg0%n%n�f�eb�c�Q�e�v�aI��NMQ
g�R-N�e0

TRDMA #��}�]-N�e0%n%n�P8�
T1z: %3%nܕ��#��}Bf�����vBf�� (�k�y): %1%n%nc\:%n%nܕ�� RDMA #��}@b�����vBf��
N�a��N� 2 R�0� RDMA IO ����N�w�Bf��Mb�[b�sSh�:y��S��f�bvQ`��z;N_j
N�v RDMA �}��Nb�aS	gOUL�0ˊ#�a}�`�v RDMA �^FU�N�S�_�]�f�e�vE��Rz_�S2�Nek�u㖒c�0

Quic #��}�]ܕ��0%n%n/����%1%n�S�V�%2%n�zޞ
T1z�%4%n�P8�
T1z�%6%n%nc_�%n%n�h�:y:O
ghV�]ܕ�� winquic #��}0dk�N�N�8^�v|vu�S�V/f\*g�^�z:O
ghV�aI�
\�a0��S��/f!q�l-��[ winquic #��}�v:O
ghV@b �b0

�The server failed to update server certificate mapping.%n%nName: %2%nSubject: %4%nThumbprint: %6%n%nThe certificate can't be used for the server due to error %7%n%nThe server certificate mapping %9 removed.

dCA 1YWe - �V�p�jHhqQ(u
N/f�SƖqQ(u�@b�N!q�l(W�e�vb�s	g�jHhqQ(u
N-��[c�~�S(ul\'`0

|CA 1YWe - �V�p*g_U�R|~�~ёp��{x��b!q�l#�P}0R�Wy�x�x@S�@b�N!q�l(W�e�vb�s	g�jHhqQ(u
N-��[c�~�S(ul\'`0

<dk:O
ghV!q�l(W�SƖ{v�-N�OYuNNP ID @S�W0

��[hQ'`�c�CQ��-�<P
NT0%n%n

_: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\DefaultSecurity\%1%n%n

c\�eݑ:%n%n

��8^/f�V�p�|q}�{t�Tb,{	N�eKb�R���fir�N�v�[hQ'`@b �b0傁�\�[hQ'`͑-��V�-�<P�ˊ*Rd�
Nb�o�:y�v_0%n

Microsoft �^p��`
N�����f�-��[hQ'` %1��V�p�#j�S��g\��a(uz_
N�v�[b�[hQ'`OUL�0

4TDI mode enabled: %1

�Failed to allocate an NSI table for network interface enumeration: %1

�Received notification of a newly-started network interface with Luid %2 on address family %1 (IPv4 == 2, IPv6 == 23)

�Received notification of a stopped network interface with Luid %2 on address family %1 (IPv4 == 2, IPv6 == 23)

xFailed to open network interface with Luid %1: error %2

�:O
ghV\�]\O���k\O�p�[g�|q}nt�vN�Rܕ��0%n%nSession Id: %1%nInstance Id: %2%nReason: %3%n

@Packet Fragment (%2 bytes)

SMB1 X[�S%n%n(u6b�zMO@W: %1%n%nc\�eݑ:%n%ndk�N�Nh�:y(u6b�zVf�O(u SMB1 X[�S:O
ghV0傁�\Pbk=z8h SMB1 X[�S�ˊO(u Windows PowerShell Cmdlet Set-SmbServerConfiguration0

hSMB :O
ghV���[0R(u6b�z
N/e�c=|r0%n%n(u6b�z
T1z: %2%n:O
ghV��Bl=|r: %3%n

�SMB :O
ghV���[0R(u6b�z(WW�I�g��*g�P� SPN�h�:y(u6b�z
N/e�cW�I� (EPA) �v�^8O�Ow��b�]\P(u EPA �v/e�c0%n%n(u6b�z
T1z� %2%nSPN �gb��rKa� %3%nSPN W�I��SGR� %4

�SMB :O
ghV���[0R(u6b�z(WW�I�g���P��N!q�l��X��v SPN0%n%n(u6b�z
T1z� %2%nSPN� %3%nSPN W�I��SGR� %6

�SMB:O
ghV���[0R�[6b�z(W���NW�I�g���P��Nzz�vSPN��h�:y�[6b�z�� Y�P�SPN�FOx��d
N�c�OSPN0%n%n�[6b�z
T1z� %2%nSPNW�I�V{eu� %3

lSMBv1 :O
ghV���[0R SMBv1 (u6b�z*g_U(u=|r0%n%n(u6b�z
T1z: %2%n:O
ghV���=|r: %3%n%nc\:%n%ndk�N�Nh�:y SMBv1 (u6b�z�S��
N/e�c SMB =|r�FO1u�e�
�TS�[�vP�6R�!q�l�x�[�Nޞ0�^p�2�NekU�0O��N�x��(u6b�z�v=|r���R0%n%n(W Windows Vista KNMR�*gf�x_U(u=|r�v SMBv1 (u6b�z!q�l�WL� SMB =|r0%ndkL��p�]��W� Windows Vista �v|vL�����f�&NN_N�]�N��f�eT�_�y
i� Windows XP �T Windows Server 20030	g�N��N���f��S��:O
ghV���=|r�sSO�l	gf�x_U(u=|r�SMB (u6b�z_N�S�N/e�c=|r0

,Packet (%4 bytes)

XSMB �]\O���kW�I�1YWe%n%n(u6b�z
T1z: %11%n(u6b�zMO@W: %6%nO(u�
T1z: %9%n�]\O���kX�%R�x: %7%n�rKa: %4 (%3)%n%nc:y: %n%nVf�O(u
Nck�x�v��I��O#��}�qQ(uBf��`�ar��gg|vudk/���0%n%ndk/���
NN�_h�:y|vu�c
kOUL��;N��h�:y|vuW�I�OUL�0��8^���e^� Windows (u6b�z0%n%nvuG�0RNR�r�lBf�1\�S��g|vudk/���: 
\ NTLM O(u
Nck�x�vO(u�
T1z�T�[�x0(u6b�z�:O
ghV
N�v LmCompatibility -��[|_dk
N&{0Kerberos 
g�R;NԚ
T1z͑�0Kerberos �chy
g�RhyI�
Nck�x�b*g
\�Oӌ3^6b_U(u�OӌX[�S
k

d(u6b�zVf�O(u SMB1 X[�S:O
ghV�FO�]���bU}��V�p SMB1 �jHhqQ(u�]\P(ub�]�d��[݈0%n%nc\�eݑ:%n%n�|q}�{t�T�]\P(ub�d��[݈ SMB1 �v:O
ghV/e�c0�WL� Windows XP / Windows Server 2003 R2 ��f�eHr,g�v(u6b�z\!q�lX[�Sdk:O
ghV0�WL� Windows Vista / Windows Server 2008 ��f�eHr,g�v(u6b�z�]
N�Q��� SMB10傁�$R�e�T.z(u6b�zVf�O(u SMB1 X[�Sdk:O
ghV�ˊO(u Windows PowerShell Cmdlet Set-SmbServerConfiguration �O_U(u SMB1 X[�S=z8h0

:O
ghV��Bl�R�[�FO{S6e0R�O�(u6b�z�v*g�R�[
�o`0
�o`�]���bU}0%n%n(u6b�z
T1z: %4%n(u6b�zMO@W: %8%nO(u�
T1z: %6%n�]\O���kX�%R�x: %9%nqQ(u
T1z: %2%n%nc:y: %n%ndk�N�Nc�QsSO SMB qQ(u��Bl�R�[�(u6b�z��/f�P�*g�R�[nj�e0

�:O
ghV�]�bU}
Nck�x=|r�v
�o`0%n%n(u6b�z
T1z: %2%n(u6b�zMO@W: %6%nO(u�
T1z: %4%n�]\O���kX�%R�x: %7%n%nc:y: %n%ndk�N�Nc�Q(u6b�zck(W�P��v��Bl�}N�
Nck�x=|r0

x:O
ghV�]�bU}!qHe�v�N�m��Bl0�]B}bk#��}0%n%n(u6b�z
T1z: %2%n(u6b�zMO@W: %6%nO(u�
T1z: %4%n�]\O���kX�%R�x: %13%n�g�e�: %7%n�g�R��: %8%n�g�[hQ'`!j_: %9%n6e0R�v�e�: %10%n6e0R�v�R��: %11%n6e0R�v�[hQ'`!j_: %12%n%nc:y: %n%ndk�N�Nc�Q(u6b�zVf�O(u
N�v&{�v�e�b�R���O�N�m,{�NP#��}0

No SMB1 usage detected in the last 20 minutes.%n%nGuidance:%n%nThis event indicates that no attempt was made to contact this computer via the SMB1 protocol. After %1 online days of no SMB1 contact attempts, the SMB1 Server service will automatically uninstall.

(`��z݈nVf�O(u SMB1 #��}0R��S��f�0%n%n(u6b�zMO@W: %1%n%nc_:%n%ndk�N�Nh�:y(u6b�zVf�O(u SMB1 X[�S:O
ghV0傁�\Pbk=z8h SMB1 X[�S�ˊO(u Windows PowerShell cmdlet Set-SmbServerConfiguration0

�SMB1 :O
ghV
g�R�]��R�d��[݈0n%nc\:%n%ndk�N�Nc�QuP,n0R(W %1 P#��}�egQ��l	g�NUO�N� SMB1 �
�TS�[#�a}dk��f��vVf��_�SMB1 :O
ghV
g�R�]��R�d��[݈0

�SMB :O
ghV���[0R(u6b�z
N/e�c=|r0%n%n(u6b�z
T1z: %2%nO(u�
T1z: %4%n:O
ghV��Bl=|r: %5%n

8SMB2 Request Negotiate

@SMB2 Request Session Setup

0SMB2 Request Logoff

<SMB2 Request Tree Connect

DSMB2 Request Tree Disconnect

,SMB2 Request Echo

0SMB2 Request Cancel

0SMB2 Request Create

0SMB2 Request Close

0SMB2 Request Flush

,SMB2 Request Read

0SMB2 Request Write

<SMB2 Request Break Oplock

HSMB2 Request Notify Break Lease

TSMB2 Request Acknowledge Break Lease

,SMB2 Request Lock

0SMB2 Request Ioctl

DSMB2 Request Query Directory

@SMB2 Request Change Notify

8SMB2 Request Query Info

4SMB2 Request Set Info

8SMB2 Response Negotiate

@SMB2 Response Session Setup

4SMB2 Response Logoff

@SMB2 Response Tree Connect

DSMB2 Response Tree Disconnect

0SMB2 Response Echo

4SMB2 Response Create

0SMB2 Response Close

0SMB2 Response Flush

0SMB2 Response Read

0SMB2 Response Write

@SMB2 Response Break Oplock

TSMB2 Response Acknowledge Break Lease

0SMB2 Response Lock

0SMB2 Response Ioctl

DSMB2 Response Query Directory

@SMB2 Response Change Notify

<SMB2 Response Query Info

8SMB2 Response Set Info

0SMB2 Response Error

�SMB �]\O���kW�I�1YWe%n%n(u6b�z
T1z: %11%n(u6b�zMO@W: %6%nO(u�
T1z: %9%n�]\O���kX�%R�x: %7%n�rKa: %4 (%3)%nSPN: %12%nSPN W�I��SGR: %13%n%nc\�eݑ:%n%nO(u
Nck�x�v��I�Vf�#��}0RqQ(uBfg|vudk/���0%n%ndk/���&N^�N�_h�:y�c
kOUL��FO;N��/fW�I�OUL�0(W^� Windows (u6b�z
N�dk/����f8^��0%n%n(WNR�`�l-N�g|vudk/���: -dM� NTLM O(u
Nck�x�vO(u�
T1z��[�x0(u6b�z�:O
ghVKN���v LmCompatibility -��[
N�v&{0
g�R;NԚ
T1z
Nck�x0Kerberos 
g�R;NԚ
T1z͑�0Kerberos hyI��c
k
g�RhyI�
Nck�x0*g_U(u�OӌX[�S�v�Oӌ3^6b

�N�m�[te'`�j�g1YWe0%n%n�rKa: %2%n(u6b�z
T1z: %4%n(u6b�zMO@W: %8%nO(u�
T1z: %6%n�]\O���kX�%R�x: %9%n%nc\�eݑ:%n%ndk�N�Nh�:y(u6b�z�:O
ghVKN���v�}�
N�v(u6b�z�N�m��Bl�]�V�p/���be*b_;e�d����f0(u6b�z�]�e�}�N2�bk�[hQ'`M�}0

DSPN optional / no validation

TSPN optional / validate service name

DSPN optional / validate full

TSPN required / validate service name

DSPN required / validate full

 Stalled I/O

DReopen durable handle failed

Tdi

Wsk

Rdma

Vmbus

Quic

Add

Update

Remove

None

8Reconnect durable file

,RKF resume create

4Build create response

N/A

2.0.2

2.1

3.0

3.0.2

3.1.1

closed

created

disabled

enabled

�Error getting unicast ip address table for interface %2. %3

�Error getting unicast ip address entry for interface %2. %3

\Error finding or adding the interface %2.

�DadState is different from IpDadStatePreferred for interface %2. Current DadState: %6.

lError getting Nsi parameters for interface %2. %3

DError allocating pool memory

lError updating transport list for device %5. %3.

XError allocating and getting table. %3.

|Notification type %6 is not supported. Nothing was done.

�Error getting Address from TransportName for interface %2. %3

lError finding the address of the interface %2. %3

�Error because SMB Direct is not supported in interface %2. %3

`Error initializing SMB in interface %2. %3

XError initilizing the async handle. %4

8XsActSrv is not active.

,Pnp exception. %4

XTimeout on comleting pnp operation. %4

�Pnp operation took too long and it was never completed so it must be cancelled. %4

LError cancelling Pnp opearion. %4

<NsiParameterNotification

(NsiAddInstance

,NsiDeleteInstance

8NsiInitialNotification

<MibParameterNotification

(MibAddInstance

,MibDeleteInstance

8MibInitialNotification

�Registry value defines properties for an FSCTL that has already been defined in another registry value.

�Registry value specifying FSCTL properties must also specify a non-zero FSCTL code.

�Registry value specifying FSCTL properties have the wrong format.

LConnection state has not changed.

4Connection timed out.

XThe connection was idle and timed out.

8The server is stopping.

<The endpoint is closing.

HThe connection is disconnected.

LThe idle connection is time out.

<All channels are closed.

8Decrypt message error.

4Irrecoverable error.

TUnauthenticated connection is closed.

\Failed to send an interim async response.

8Insufficient resources.

4Decompression error.

PSMB transform header are malformed.

\Connection/Stream shutdown without error.

\Connection/Stream shutdown unknown error.

TThe event received is not supported.

0Invalid Parameter.

<The object is not found.

8Insufficient resources.

TServer can't create a new connection.

xServer can't set bidi stream count for the connection.

PServer can't get the local address.

DServer close the connection.

�4VS_VERSION_INFO��
|aJ
|aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft CorporationHFileDescriptionSmb 2.0 :O
ghVE��Rz_n'FileVersion10.0.19041.7548 (WinBuild.160101.0800)2	InternalNameSRV2.SYS�.LegalCopyright� Microsoft Corporation. All rights reserved.B
OriginalFilenameSRV2.SYS.MUIj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.7548DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD