3.3.5.57.6 Receiving a TRANS_PEEK_NMPIPE Request
Upon receipt of a TRANS_PEEK_NMPIPE (section 2.2.5.5) subcommand request, the SMB Trans subsystem MUST attempt to peek at information from the named pipe indicated by the Server.Open identified by the SMB_Parameters.Words.Setup.FID field of the request. Data MUST be read from the named pipe without removing the data from the pipe queue. The maximum amount of data to be read is specified by the SMB_Parameters.Words.MaxDataCount field of the request.<330>
If the request fails, the status code indicating the error is returned in an SMB_COM_TRANSACTION (section 2.2.4.33) error response message. If successful, the server MUST construct a TRANS_PEEK_NMPIPE Response (section 2.2.5.5.2).
The CIFS server passes the results to the client in the SMB_COM_TRANSACTION Response (section 2.2.4.33.2).