1076	3.671828	172.16.0.1	172.16.0.80	SMB2	131	Create Response, Error: STATUS_FILE_IS_A_DIRECTORY

Frame 1076: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) on interface 0
    Interface id: 0 (\Device\NPF_{FBD7FC3D-0E36-45B5-8709-632F431FE6C7})
        Interface name: \Device\NPF_{FBD7FC3D-0E36-45B5-8709-632F431FE6C7}
    Encapsulation type: Ethernet (1)
    Arrival Time: Feb 20, 2019 13:10:12.770686000 GMT Standard Time
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1550668212.770686000 seconds
    [Time delta from previous captured frame: 0.002349000 seconds]
    [Time delta from previous displayed frame: 0.002349000 seconds]
    [Time since reference or first frame: 3.671828000 seconds]
    Frame Number: 1076
    Frame Length: 131 bytes (1048 bits)
    Capture Length: 131 bytes (1048 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp:nbss:smb2]
    [Coloring Rule Name: SMB]
    [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios]
Ethernet II, Src: HewlettP_46:6f:ee (70:10:6f:46:6f:ee), Dst: Elitegro_2f:e1:7f (74:27:ea:2f:e1:7f)
    Destination: Elitegro_2f:e1:7f (74:27:ea:2f:e1:7f)
        Address: Elitegro_2f:e1:7f (74:27:ea:2f:e1:7f)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: HewlettP_46:6f:ee (70:10:6f:46:6f:ee)
        Address: HewlettP_46:6f:ee (70:10:6f:46:6f:ee)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 172.16.0.1, Dst: 172.16.0.80
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 117
    Identification: 0x2027 (8231)
    Flags: 0x4000, Don't fragment
        0... .... .... .... = Reserved bit: Not set
        .1.. .... .... .... = Don't fragment: Set
        ..0. .... .... .... = More fragments: Not set
        ...0 0000 0000 0000 = Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x81ea [validation disabled]
    [Header checksum status: Unverified]
    Source: 172.16.0.1
    Destination: 172.16.0.80
Transmission Control Protocol, Src Port: 445, Dst Port: 53349, Seq: 232, Ack: 697, Len: 77
    Source Port: 445
    Destination Port: 53349
    [Stream index: 12]
    [TCP Segment Len: 77]
    Sequence number: 232    (relative sequence number)
    [Next sequence number: 309    (relative sequence number)]
    Acknowledgment number: 697    (relative ack number)
    0101 .... = Header Length: 20 bytes (5)
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······AP···]
    Window size value: 256
    [Calculated window size: 256]
    [Window size scaling factor: -1 (unknown)]
    Checksum: 0xfc44 [unverified]
    [Checksum Status: Unverified]
    Urgent pointer: 0
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1075]
        [The RTT to ACK the segment was: 0.002349000 seconds]
        [Bytes in flight: 77]
        [Bytes sent since last PSH flag: 77]
    [Timestamps]
        [Time since first frame in this TCP stream: 0.015439000 seconds]
        [Time since previous frame in this TCP stream: 0.002349000 seconds]
    TCP payload (77 bytes)
NetBIOS Session Service
    Message Type: Session message (0x00)
    Length: 73
SMB2 (Server Message Block Protocol version 2)
    SMB2 Header
        Server Component: SMB2
        Header Length: 64
        Credit Charge: 1
        NT Status: STATUS_FILE_IS_A_DIRECTORY (0xc00000ba)
        Command: Create (5)
        Credits granted: 1
        Flags: 0x00000009, Response, Signing
            .... .... .... .... .... .... .... ...1 = Response: This is a RESPONSE
            .... .... .... .... .... .... .... ..0. = Async command: This is a SYNC command
            .... .... .... .... .... .... .... .0.. = Chained: This pdu is NOT a chained command
            .... .... .... .... .... .... .... 1... = Signing: This pdu is SIGNED
            .... .... .... .... .... .... .000 .... = Priority: This pdu does NOT contain a PRIORITY1
            ...0 .... .... .... .... .... .... .... = DFS operation: This is a normal operation
            ..0. .... .... .... .... .... .... .... = Replay operation: This is NOT a replay operation
        Chain Offset: 0x00000000
        Message ID: Unknown (53738)
        Process Id: 0x0000feff
        Tree Id: 0x0000000d
        Session Id: 0x0001100000000005
        Signature: adcc16c8f73b9b5f02546d639601b15c
        [Response to: 1075]
        [Time from request: 0.002349000 seconds]
    Create Response (0x05)
        StructureSize: 0x0009
            0000 0000 0000 100. = Fixed Part Length: 4
            .... .... .... ...1 = Dynamic Part: True
        Error Context Count: 0
        Reserved: 0x00
        Byte Count: 0
        Error Data: 00