r11741: - the buffer code (first 2 bytes in the SMB2 body) seem to be the length