WIN10 -> Samba

SMB2 (Server Message Block Protocol version 2)
    SMB2 Header
    Ioctl Request (0x0b)
        StructureSize: 0x0039
        Reserved: 0000
        Function: FSCTL_DFS_GET_REFERRALS (0x00060194)
        GUID handle
        Max Ioctl In Size: 0
        Max Ioctl Out Size: 4096
        Flags: 0x00000001
        Reserved: 00000000
        Blob Offset: 0x00000078
        Blob Length: 4
        In Data
            Max Referral Level: 3
            File Name: 
        Blob Offset: 0x00000078
        Blob Length: 0
        Out Data: NO DATA


SMB2 (Server Message Block Protocol version 2)
    SMB2 Header
    Ioctl Response (0x0b)
        StructureSize: 0x0031
        Unknown: 0000
        Function: FSCTL_DFS_GET_REFERRALS (0x00060194)
        GUID handle
        Reserved: 00000000
        Reserved: 00000000
        Blob Offset: 0x00000070
        Blob Length: 0
        In Data: NO DATA
        Blob Offset: 0x00000070
        Blob Length: 140
        Out Data
            Path Consumed: 0
            Num Referrals: 2
            Flags: 0x0000
            Padding: 0000
            Referrals
                Referral
                    Version: 3
                    Size: 34
                    Server Type: Non-root targets returned (0)
                    Flags: 0x0002, NameListReferral
                    TTL: 600
                    Domain Offset: 68
                    Number of Expanded Names: 0
                    Expanded Names Offset: 0
                    Domain Name: \SAMBA4AD
                    Unknown Data: 00000000000000000000000000000000
                Referral
                    Version: 3
                    Size: 34
                    Server Type: Non-root targets returned (0)
                    Flags: 0x0002, NameListReferral
                    TTL: 600
                    Domain Offset: 54
                    Number of Expanded Names: 0
                    Expanded Names Offset: 0
                    Domain Name: \samba4ad.springfield
                    Unknown Data: 00000000000000000000000000000000



SMB2 (Server Message Block Protocol version 2)
    SMB2 Header
    Ioctl Request (0x0b)
        StructureSize: 0x0039
        Reserved: 0000
        Function: FSCTL_DFS_GET_REFERRALS (0x00060194)
        GUID handle
        Max Ioctl In Size: 0
        Max Ioctl Out Size: 4096
        Flags: 0x00000001
        Reserved: 00000000
        Blob Offset: 0x00000078
        Blob Length: 54
        In Data
            Max Referral Level: 4
            File Name: \samba4ad.springfield\dfs
        Blob Offset: 0x00000078
        Blob Length: 0
        Out Data: NO DATA

SMB2 (Server Message Block Protocol version 2)
    SMB2 Header
    Ioctl Response (0x0b)
        StructureSize: 0x0031
        Unknown: 0000
        Function: FSCTL_DFS_GET_REFERRALS (0x00060194)
        GUID handle
        Reserved: 00000000
        Reserved: 00000000
        Blob Offset: 0x00000070
        Blob Length: 0
        In Data: NO DATA
        Blob Offset: 0x00000070
        Blob Length: 198
        Out Data
            Path Consumed: 50
            Num Referrals: 1
            Flags: 0x0003, Hold Storage, Fielding
            Padding: 0000
            Referrals
                Referral
                    Version: 3
                    Size: 34
                    Server Type: Root targets returns (1)
                    Flags: 0x0000
                    TTL: 600
                    Path Offset: 34
                    Alt Path Offset: 86
                    Node Offset: 138
                    Server GUID: 00000000-0000-0000-0000-000000000000
                    Path: \samba4ad.springfield\dfs
                    Alt Path: \samba4ad.springfield\dfs
                    Node: \samba4ad.springfield\dfs