Export (0) Print
Expand All

8 Index

A

Abstract data model

client

global (section 3.1.1.1, section 3.2.1.1)

overview (section 3.1.1, section 3.2.1)

RPC

global

overview (section 3.1.1, section 3.4.1)

SMB

connection

session

tree connect

unique

open

open search

server

global (section 3.1.1.1, section 3.3.1.1)

overview (section 3.1.1, section 3.3.1)

RPC

global

overview (section 3.1.1, section 3.5.1)

share

SMB

command - pending

connection

session

tree connect

unique

open

open search

AndX packet

Applicability

C

Capability negotiation

Change tracking

Character sequences data type

Client

abstract data model

global (section 3.1.1.1, section 3.2.1.1)

overview (section 3.1.1, section 3.2.1)

SMB

connection

session

tree connect

unique

open

open search

higher-layer triggered events

cryptographic session key - querying

device

reading

writing

DFS

querying referrals

subsystem active

directory

contents change notification

creating

deleting

enumeration

verifying path

file

attributes

querying

setting

byte-range lock

byte-range lock - release

closing

create or overwrite

creating a hard link

deleting

flushing data

opening an existing

opportunistic lock

print

reading

renaming

seek to a location

sending IOCTL

system attributes - querying

writing

named pipe

exchange (call)

executing a transaction

peeking at data

querying

handle state

information

reading (section 3.2.4.14, section 3.2.4.37)

setting state

waiting for availability

writing (section 3.2.4.15, section 3.2.4.38)

named RAP transaction

number of opens on tree connect

operations - canceling pending

process exit notification

security descriptors

querying

setting

sending any message (section 3.1.4.1, section 3.2.4.1)

share - connecting

SMB session logoff

transport layer connection - testing

tree disconnect (unmount share)

initialization (section 3.1.3, section 3.2.3)

local events

handling transport disconnect

overview

message processing

algorithms for challenge/response authentication

OpLock

break notification

grant

receiving any message (section 3.1.5.1, section 3.2.5.1)

SMB_COM_CLOSE response

SMB_COM_CREATE response

SMB_COM_CREATE_NEW response

SMB_COM_CREATE_TEMPORARY response

SMB_COM_ECHO response

SMB_COM_FIND response

SMB_COM_FIND_CLOSE2 response

SMB_COM_FIND_UNIQUE response

SMB_COM_IOCTL response

SMB_COM_LOCK_AND_READ response

SMB_COM_LOGOFF_ANDX response

SMB_COM_NEGOTIATE response

SMB_COM_NT_CREATE_ANDX response

SMB_COM_NT_TRANSACT response

SMB_COM_NT_TRANSACT subcommand response

SMB_COM_OPEN response

SMB_COM_OPEN_ANDX response

SMB_COM_OPEN_PRINT_FILE response

SMB_COM_QUERY_INFORMATION response

SMB_COM_QUERY_INFORMATION_DISK response

SMB_COM_QUERY_INFORMATION2 response

SMB_COM_READ response

SMB_COM_READ_ANDX response

SMB_COM_READ_MPX response

SMB_COM_READ_RAW response

SMB_COM_SEARCH response

SMB_COM_SEEK response

SMB_COM_SESSION_SETUP_ANDX response

SMB_COM_TRANSACTION response

SMB_COM_TRANSACTION subcommand response

SMB_COM_TRANSACTION2 response

SMB_COM_TRANSACTION2 subcommand response

SMB_COM_TREE_CONNECT response

SMB_COM_TREE_CONNECT_ANDX response

SMB_COM_TREE_DISCONNECT response

SMB_COM_WRITE response

SMB_COM_WRITE_AND_CLOSE response

SMB_COM_WRITE_AND_UNLOCK response

SMB_COM_WRITE_ANDX response

SMB_COM_WRITE_MPX response

SMB_COM_WRITE_RAW response

STATUS_PATH_NOT_COVERED

RPC

abstract data model

global

overview (section 3.1.1, section 3.4.1)

higher-layer triggered events

DFS referrals - querying

extended DFS referral capability - querying

named pipe

closing

opening

reading

transaction - issuing

writing

sending any message

session

initiating

key - authenticated context

terminating

share connection - requesting

tree disconnect - requesting

initialization (section 3.1.3, section 3.4.3)

local events (section 3.1.7, section 3.4.7)

message processing

algorithms for challenge/response authentication

overview

receiving any message

overview

sequencing rules

algorithms for challenge/response authentication

overview

receiving any message

timer events (section 3.1.6, section 3.4.6)

timers (section 3.1.2, section 3.4.2)

sequencing rules

algorithms for challenge/response authentication

OpLock

break notification

grant

receiving any message (section 3.1.5.1, section 3.2.5.1)

SMB_COM_CLOSE response

SMB_COM_CREATE response

SMB_COM_CREATE_NEW response

SMB_COM_CREATE_TEMPORARY response

SMB_COM_ECHO response

SMB_COM_FIND response

SMB_COM_FIND_CLOSE2 response

SMB_COM_FIND_UNIQUE response

SMB_COM_IOCTL response

SMB_COM_LOCK_AND_READ response

SMB_COM_LOGOFF_ANDX response

SMB_COM_NEGOTIATE response

SMB_COM_NT_CREATE_ANDX response

SMB_COM_NT_TRANSACT response

SMB_COM_NT_TRANSACT subcommand response

SMB_COM_OPEN response

SMB_COM_OPEN_ANDX response

SMB_COM_OPEN_PRINT_FILE response

SMB_COM_QUERY_INFORMATION response

SMB_COM_QUERY_INFORMATION_DISK response

SMB_COM_QUERY_INFORMATION2 response

SMB_COM_READ response

SMB_COM_READ_ANDX response

SMB_COM_READ_MPX response

SMB_COM_READ_RAW response

SMB_COM_SEARCH response

SMB_COM_SEEK response

SMB_COM_SESSION_SETUP_ANDX response

SMB_COM_TRANSACTION response

SMB_COM_TRANSACTION subcommand response

SMB_COM_TRANSACTION2 response

SMB_COM_TRANSACTION2 subcommand response

SMB_COM_TREE_CONNECT response

SMB_COM_TREE_CONNECT_ANDX response

SMB_COM_TREE_DISCONNECT response

SMB_COM_WRITE response

SMB_COM_WRITE_AND_CLOSE response

SMB_COM_WRITE_AND_UNLOCK response

SMB_COM_WRITE_ANDX response

SMB_COM_WRITE_MPX response

SMB_COM_WRITE_RAW response

STATUS_PATH_NOT_COVERED

timer events

overview

request expiration

timers

idle connection

OpLock break acknowledgment

overview

request expiration

unused open search

Codes

command - SMB_COM

data buffer format

information level

SMB error classes

subcommand - transaction

Command codes - SMB_COM

Commands - SMB

SMB_COM_CHECK_DIRECTORY (0x10)

SMB_COM_CLOSE (0x04)

SMB_COM_CLOSE_AND_TREE_DISC (0x31)

SMB_COM_CLOSE_PRINT_FILE (0xC2)

SMB_COM_COPY (0x29)

SMB_COM_CREATE (0x03)

SMB_COM_CREATE_DIRECTORY (0x00)

SMB_COM_CREATE_NEW (0x0F)

SMB_COM_CREATE_TEMPORARY (0x0E)

SMB_COM_DELETE (0x06)

SMB_COM_DELETE_DIRECTORY (0x01)

SMB_COM_ECHO (0x2B)

SMB_COM_FIND (0x82)

SMB_COM_FIND_CLOSE (0x84)

SMB_COM_FIND_CLOSE2 (0x34)

SMB_COM_FIND_NOTIFY_CLOSE (0x35)

SMB_COM_FIND_UNIQUE (0x83)

SMB_COM_FLUSH (0x05)

SMB_COM_GET_PRINT_QUEUE (0xC3)

SMB_COM_INVALID (0xFE)

SMB_COM_IOCTL (0x27)

SMB_COM_IOCTL_SECONDARY (0x28)

SMB_COM_LOCK_AND_READ (0x13)

SMB_COM_LOCK_BYTE_RANGE (0x0C)

SMB_COM_LOCKING_ANDX (0x24)

SMB_COM_LOGOFF_ANDX (0x74)

SMB_COM_MOVE (0x2A)

SMB_COM_NEGOTIATE (0x72)

SMB_COM_NEW_FILE_SIZE (0x30)

SMB_COM_NO_ANDX_COMMAND (0xFF)

SMB_COM_NT_CANCEL (0xA4)

SMB_COM_NT_CREATE_ANDX (0xA2)

SMB_COM_NT_RENAME (0xA5)

SMB_COM_NT_TRANSACT (0xA0)

SMB_COM_NT_TRANSACT_SECONDARY (0xA1)

SMB_COM_OPEN (0x02)

SMB_COM_OPEN_ANDX (0x2D)

SMB_COM_OPEN_PRINT_FILE (0xC0)

SMB_COM_PROCESS_EXIT (0x11)

SMB_COM_QUERY_INFORMATION (0x08)

SMB_COM_QUERY_INFORMATION_DISK (0x80)

SMB_COM_QUERY_INFORMATION2 (0x23)

SMB_COM_QUERY_SERVER (0x21)

SMB_COM_READ (0x0A)

SMB_COM_READ_ANDX (0x2E)

SMB_COM_READ_BULK (0xD8)

SMB_COM_READ_MPX (0x1B)

SMB_COM_READ_MPX_SECONDARY (0x1C)

SMB_COM_READ_RAW (0x1A)

SMB_COM_RENAME (0x07)

SMB_COM_SEARCH (0x81)

SMB_COM_SECURITY_PACKAGE_ANDX (0x7E)

SMB_COM_SEEK (0x12)

SMB_COM_SESSION_SETUP_ANDX (0x73)

SMB_COM_SET_INFORMATION (0x09)

SMB_COM_SET_INFORMATION2 (0x22)

SMB_COM_TRANSACTION (0x25)

SMB_COM_TRANSACTION_SECONDARY (0x26)

SMB_COM_TRANSACTION2 (0x32)

SMB_COM_TRANSACTION2_SECONDARY (0x33)

SMB_COM_TREE_CONNECT (0x70)

SMB_COM_TREE_CONNECT_ANDX (0x75)

SMB_COM_TREE_DISCONNECT (0x71)

SMB_COM_UNLOCK_BYTE_RANGE (0x0D)

SMB_COM_WRITE (0x0B)

SMB_COM_WRITE_AND_CLOSE (0x2C)

SMB_COM_WRITE_AND_UNLOCK (0x14)

SMB_COM_WRITE_ANDX (0x2F)

SMB_COM_WRITE_BULK (0xD9)

SMB_COM_WRITE_BULK_DATA (0xDA)

SMB_COM_WRITE_COMPLETE (0x20)

SMB_COM_WRITE_MPX (0x1E)

SMB_COM_WRITE_MPX_SECONDARY (0x1F)

SMB_COM_WRITE_PRINT_FILE (0xC1)

SMB_COM_WRITE_RAW (0x1D)

Common data types

Copy file

from share example

to share example

D

Data buffer format codes

Data model - abstract

client

global (section 3.1.1.1, section 3.2.1.1)

overview (section 3.1.1, section 3.2.1)

RPC

global

overview (section 3.1.1, section 3.4.1)

SMB

connection

session

tree connect

unique

open

open search

server

global (section 3.1.1.1, section 3.3.1.1)

overview (section 3.1.1, section 3.3.1)

RPC

global

overview (section 3.1.1, section 3.5.1)

share

SMB

command - pending

connection

session

tree connect

unique

open

open search

Data types

character sequences

common - overview

file attributes

SMB_ERROR

SMB_NMPIPE_STATUS

time

unique identifiers

DAY

Direct hosting

Direct IPX

Disconnect example

E

Error classes and codes - SMB

Events

local

client

handling transport disconnect

overview

RPC (section 3.1.7, section 3.4.7)

server

disconnecting connection

handling

incoming transport connection

transport disconnect

overview

RPC (section 3.1.7, section 3.5.7)

timer

client

overview

request expiration

RPC (section 3.1.6, section 3.4.6)

server

idle connection

OpLock break acknowledgment

overview

RPC (section 3.1.6, section 3.5.6)

unused open search

Examples

copy file

from share

to share

disconnect

get file attributes

message signing

negotiate and tree connect

overview

set file attributes

F

Fields - vendor extensible

File attributes data type

Final_Server_Response packet

G

Get file attributes example

Glossary

H

Higher-layer triggered events

client

cryptographic session key - querying

device

reading

writing

DFS

querying referrals

subsystem active

directory

contents change notification

creating

deleting

enumeration

verifying path

file

attributes

querying

setting

byte-range lock

byte-range lock - release

closing

create or overwrite

creating a hard link

deleting

flushing data

opening an existing

opportunistic lock

print

reading

renaming

seek to a location

sending IOCTL

system attributes - querying

writing

named pipe

exchange (call)

executing a transaction

peeking at data

querying

handle state

information

reading (section 3.2.4.14, section 3.2.4.37)

setting state

waiting for availability

writing (section 3.2.4.15, section 3.2.4.38)

named RAP transaction

number of opens on tree connect

operations - canceling pending

process exit notification

RPC

DFS referrals - querying

extended DFS referral capability - querying

named pipe

closing

opening

reading

transaction - issuing

writing

sending any message

session

initiating

key - authenticated context

terminating

share connection - requesting

tree disconnect - requesting

security descriptors

querying

setting

sending any message (section 3.1.4.1, section 3.2.4.1)

share - connecting

SMB session logoff

transport layer connection - testing

tree disconnect (unmount share)

server

client session

security context

session key

configuration - updating

DFS subsystem

active

DFS share

not a DFS share

disabling

enabling

open

closing

querying

OpLock break

pausing

resuming

RPC

named pipe

closing its open

waiting for clients to open

security context

sending any message

session key

sending any message (section 3.1.4.1, section 3.3.4.1)

session

closing

querying

share

deregistering

querying

registering

updating

statistics

transport binding change

TreeConnect - querying

HOUR

I

Implementer - security considerations

Index of security parameters

Information level

codes

overview

Informative references

Initialization

client

overview (section 3.1.3, section 3.2.3)

RPC (section 3.1.3, section 3.4.3)

server

overview (section 3.1.3, section 3.3.3)

RPC (section 3.1.3, section 3.5.3)

Interim_Server_Response packet

Introduction

L

Local events

client

handling transport disconnect

overview

RPC (section 3.1.7, section 3.4.7)

server

disconnecting connection

handling

incoming transport connection

transport disconnect

overview

RPC (section 3.1.7, section 3.5.7)

M

Message processing

client

algorithms for challenge/response authentication

OpLock

break notification

grant

receiving any message (section 3.1.5.1, section 3.2.5.1)

RPC

algorithms for challenge/response authentication

overview

receiving any message

SMB_COM_CLOSE response

SMB_COM_CREATE response

SMB_COM_CREATE_NEW response

SMB_COM_CREATE_TEMPORARY response

SMB_COM_ECHO response

SMB_COM_FIND response

SMB_COM_FIND_CLOSE2 response

SMB_COM_FIND_UNIQUE response

SMB_COM_IOCTL response

SMB_COM_LOCK_AND_READ response

SMB_COM_LOGOFF_ANDX response

SMB_COM_NEGOTIATE response

SMB_COM_NT_CREATE_ANDX response

SMB_COM_NT_TRANSACT response

SMB_COM_NT_TRANSACT subcommand response

SMB_COM_OPEN response

SMB_COM_OPEN_ANDX response

SMB_COM_OPEN_PRINT_FILE response

SMB_COM_QUERY_INFORMATION response

SMB_COM_QUERY_INFORMATION_DISK response

SMB_COM_QUERY_INFORMATION2 response

SMB_COM_READ response

SMB_COM_READ_ANDX response

SMB_COM_READ_MPX response

SMB_COM_READ_RAW response

SMB_COM_SEARCH response

SMB_COM_SEEK response

SMB_COM_SESSION_SETUP_ANDX response

SMB_COM_TRANSACTION response

SMB_COM_TRANSACTION subcommand response

SMB_COM_TRANSACTION2 response

SMB_COM_TRANSACTION2 subcommand response

SMB_COM_TREE_CONNECT response

SMB_COM_TREE_CONNECT_ANDX response

SMB_COM_TREE_DISCONNECT response

SMB_COM_WRITE response

SMB_COM_WRITE_AND_CLOSE response

SMB_COM_WRITE_AND_UNLOCK response

SMB_COM_WRITE_ANDX response

SMB_COM_WRITE_MPX response

SMB_COM_WRITE_RAW response

STATUS_PATH_NOT_COVERED

server

algorithms for challenge/response authentication

incoming connection

receiving any message (section 3.1.5.1, section 3.3.5.2)

RPC

algorithms for challenge/response authentication

overview

receiving any message

SMB_COM_CHECK_DIRECTORY request

SMB_COM_CLOSE request

SMB_COM_CLOSE_PRINT_FILE request

SMB_COM_CREATE request

SMB_COM_CREATE_DIRECTORY request

SMB_COM_CREATE_NEW request

SMB_COM_CREATE_TEMPORARY request

SMB_COM_DELETE request

SMB_COM_DELETE_DIRECTORY request

SMB_COM_ECHO request

SMB_COM_FIND request

SMB_COM_FIND_CLOSE request

SMB_COM_FIND_CLOSE2 request

SMB_COM_FIND_UNIQUE request

SMB_COM_FLUSH request

SMB_COM_IOCTL request

SMB_COM_LOCK_AND_READ request

SMB_COM_LOCK_BYTE_RANGE request

SMB_COM_LOCKING_ANDX request

SMB_COM_LOGOFF_ANDX request

SMB_COM_NEGOTIATE request

SMB_COM_NT_CANCEL request

SMB_COM_NT_CREATE_ANDX request

SMB_COM_NT_RENAME request

SMB_COM_NT_TRANSACT request

SMB_COM_NT_TRANSACT subcommand request

SMB_COM_OPEN request

SMB_COM_OPEN_ANDX request

SMB_COM_OPEN_PRINT_FILE request

SMB_COM_PROCESS_EXIT request

SMB_COM_QUERY_INFORMATION request

SMB_COM_QUERY_INFORMATION_DISK request

SMB_COM_QUERY_INFORMATION2 request

SMB_COM_READ request

SMB_COM_READ_ANDX request

SMB_COM_READ_MPX request

SMB_COM_READ_RAW request

SMB_COM_RENAME request

SMB_COM_SEARCH request

SMB_COM_SEEK request

SMB_COM_SESSION_SETUP_ANDX request

SMB_COM_SET_INFORMATION request

SMB_COM_SET_INFORMATION2 request

SMB_COM_TRANSACTION request

SMB_COM_TRANSACTION subcommand request

SMB_COM_TRANSACTION2 request

SMB_COM_TRANSACTION2 subcommand request

SMB_COM_TREE_CONNECT request

SMB_COM_TREE_CONNECT_ANDX request

SMB_COM_TREE_DISCONNECT request

SMB_COM_UNLOCK_BYTE_RANGE request

SMB_COM_WRITE request

SMB_COM_WRITE_AND_CLOSE request

SMB_COM_WRITE_AND_UNLOCK request

SMB_COM_WRITE_ANDX request

SMB_COM_WRITE_MPX request

SMB_COM_WRITE_PRINT_FILE request

SMB_COM_WRITE_RAW request

Message signing example

Messages

character sequences data type

common data types

data buffer format codes

file attributes data type

information level

codes

overview

NT Transact subcommands

NT_TRANSACT_CREATE (0x0001)

NT_TRANSACT_IOCTL (0x0002)

NT_TRANSACT_NOTIFY_CHANGE (0x0004)

NT_TRANSACT_QUERY_SECURITY_DESC (0x0006)

NT_TRANSACT_RENAME (0x0005)

NT_TRANSACT_SET_SECURITY_DESC (0x0003)

SMB

commands

SMB_COM_CHECK_DIRECTORY (0x10)

SMB_COM_CLOSE (0x04)

SMB_COM_CLOSE_AND_TREE_DISC (0x31)

SMB_COM_CLOSE_PRINT_FILE (0xC2)

SMB_COM_COPY (0x29)

SMB_COM_CREATE (0x03)

SMB_COM_CREATE_DIRECTORY (0x00)

SMB_COM_CREATE_NEW (0x0F)

SMB_COM_CREATE_TEMPORARY (0x0E)

SMB_COM_DELETE (0x06)

SMB_COM_DELETE_DIRECTORY (0x01)

SMB_COM_ECHO (0x2B)

SMB_COM_FIND (0x82)

SMB_COM_FIND_CLOSE (0x84)

SMB_COM_FIND_CLOSE2 (0x34)

SMB_COM_FIND_NOTIFY_CLOSE (0x35)

SMB_COM_FIND_UNIQUE (0x83)

SMB_COM_FLUSH (0x05)

SMB_COM_GET_PRINT_QUEUE (0xC3)

SMB_COM_INVALID (0xFE)

SMB_COM_IOCTL (0x27)

SMB_COM_IOCTL_SECONDARY (0x28)

SMB_COM_LOCK_AND_READ (0x13)

SMB_COM_LOCK_BYTE_RANGE (0x0C)

SMB_COM_LOCKING_ANDX (0x24)

SMB_COM_LOGOFF_ANDX (0x74)

SMB_COM_MOVE (0x2A)

SMB_COM_NEGOTIATE (0x72)

SMB_COM_NEW_FILE_SIZE (0x30)

SMB_COM_NO_ANDX_COMMAND (0xFF)

SMB_COM_NT_CANCEL (0xA4)

SMB_COM_NT_CREATE_ANDX (0xA2)

SMB_COM_NT_RENAME (0xA5)

SMB_COM_NT_TRANSACT (0xA0)

SMB_COM_NT_TRANSACT_SECONDARY (0xA1)

SMB_COM_OPEN (0x02)

SMB_COM_OPEN_ANDX (0x2D)

SMB_COM_OPEN_PRINT_FILE (0xC0)

SMB_COM_PROCESS_EXIT (0x11)

SMB_COM_QUERY_INFORMATION (0x08)

SMB_COM_QUERY_INFORMATION_DISK (0x80)

SMB_COM_QUERY_INFORMATION2 (0x23)

SMB_COM_QUERY_SERVER (0x21)

SMB_COM_READ (0x0A)

SMB_COM_READ_ANDX (0x2E)

SMB_COM_READ_BULK (0xD8)

SMB_COM_READ_MPX (0x1B)

SMB_COM_READ_MPX_SECONDARY (0x1C)

SMB_COM_READ_RAW (0x1A)

SMB_COM_RENAME (0x07)

SMB_COM_SEARCH (0x81)

SMB_COM_SECURITY_PACKAGE_ANDX (0x7E)

SMB_COM_SEEK (0x12)

SMB_COM_SESSION_SETUP_ANDX (0x73)

SMB_COM_SET_INFORMATION (0x09)

SMB_COM_SET_INFORMATION2 (0x22)

SMB_COM_TRANSACTION (0x25)

SMB_COM_TRANSACTION_SECONDARY (0x26)

SMB_COM_TRANSACTION2 (0x32)

SMB_COM_TRANSACTION2_SECONDARY (0x33)

SMB_COM_TREE_CONNECT (0x70)

SMB_COM_TREE_CONNECT_ANDX (0x75)

SMB_COM_TREE_DISCONNECT (0x71)

SMB_COM_UNLOCK_BYTE_RANGE (0x0D)

SMB_COM_WRITE (0x0B)

SMB_COM_WRITE_AND_CLOSE (0x2C)

SMB_COM_WRITE_AND_UNLOCK (0x14)

SMB_COM_WRITE_ANDX (0x2F)

SMB_COM_WRITE_BULK (0xD9)

SMB_COM_WRITE_BULK_DATA (0xDA)

SMB_COM_WRITE_COMPLETE (0x20)

SMB_COM_WRITE_MPX (0x1E)

SMB_COM_WRITE_MPX_SECONDARY (0x1F)

SMB_COM_WRITE_PRINT_FILE (0xC1)

SMB_COM_WRITE_RAW (0x1D)

structure

batched messages ("AndX" messages)

data block

overview

parameter block

SMB_Header

SMB error classes and codes

SMB_COM command codes

SMB_ERROR data type

SMB_NMPIPE_STATUS data type

syntax

time data type

transaction subcommand codes

Transaction subcommands

overview

TRANS_CALL_NMPIPE (0x0054)

TRANS_MAILSLOT_WRITE (0x0001)

TRANS_PEEK_NMPIPE (0x0023)

TRANS_QUERY_NMPIPE_INFO (0x0022)

TRANS_QUERY_NMPIPE_STATE (0x0021)

TRANS_RAW_READ_NMPIPE (0x0011)

TRANS_RAW_WRITE_NMPIPE (0x0031)

TRANS_READ_NMPIPE (0x0036)

TRANS_SET_NMPIPE_STATE (0x0001)

TRANS_TRANSACT_NMPIPE (0x0026)

TRANS_WAIT_NMPIPE (0x0053)

TRANS_WRITE_NMPIPE (0x0037)

Transaction2 subcommands

TRANS2_CREATE_DIRECTORY (0x000D)

TRANS2_FIND_FIRST2 (0x0001)

TRANS2_FIND_NEXT2 (0x0002)

TRANS2_FIND_NOTIFY_FIRST (0x000B)

TRANS2_FIND_NOTIFY_NEXT (0x000C)

TRANS2_FSCTL (0x0009)

TRANS2_GET_DFS_REFERRAL (0x0010)

TRANS2_IOCTL2 (0x000A)

TRANS2_OPEN2 (0x0000)

TRANS2_QUERY_FILE_INFORMATION (0x0007)

TRANS2_QUERY_FS_INFORMATION (0x0003)

TRANS2_QUERY_PATH_INFORMATION (0x0005)

TRANS2_REPORT_DFS_INCONSISTENCY (0x0011)

TRANS2_SESSION_SETUP (0x000E)

TRANS2_SET_FILE_INFORMATION (0x0008)

TRANS2_SET_FS_INFORMATION (0x0004)

TRANS2_SET_PATH_INFORMATION (0x0006)

transport

direct hosting

direct IPX

NetBIOS

frames

over

IPX/SPX

TCP/UDP

NetBIOS-based transports

other

overview

overview

virtual circuits

unique identifiers data type

MINUTES

MONTH

N

Negotiate and tree connect example

NetBIOS

frames

over

IPX/SPX

TCP/UDP

NetBIOS-based transports

other

overview

Normative references

NT Transact subcommands

NT_TRANSACT_CREATE (0x0001)

NT_TRANSACT_IOCTL (0x0002)

NT_TRANSACT_NOTIFY_CHANGE (0x0004)

NT_TRANSACT_QUERY_SECURITY_DESC (0x0006)

NT_TRANSACT_RENAME (0x0005)

NT_TRANSACT_SET_SECURITY_DESC (0x0003)

O

Other

Overview

P

Parameters - security index

Preconditions

Prerequisites

Product behavior

R

References

informative

normative

Relationship to other protocols

Request packet (section 2.2.4.2.1, section 2.2.4.3.1, section 2.2.4.4.1, section 2.2.4.5.1, section 2.2.4.6.1, section 2.2.4.7.1, section 2.2.4.8.1, section 2.2.4.9.1, section 2.2.4.10.1, section 2.2.4.11.1, section 2.2.4.12.1, section 2.2.4.13.1, section 2.2.4.14.1, section 2.2.4.15.1, section 2.2.4.16.1, section 2.2.4.17.1, section 2.2.4.18.1, section 2.2.4.19.1, section 2.2.4.20.1, section 2.2.4.21.1, section 2.2.4.22.1, section 2.2.4.23.1, section 2.2.4.25.1, section 2.2.4.26.1, section 2.2.4.30.1, section 2.2.4.31.1, section 2.2.4.32.1, section 2.2.4.33.1, section 2.2.4.34.1, section 2.2.4.35.1, section 2.2.4.39.1, section 2.2.4.40.1, section 2.2.4.41.1, section 2.2.4.42.1, section 2.2.4.43.1, section 2.2.4.46.1, section 2.2.4.47.1, section 2.2.4.48.1, section 2.2.4.50.1, section 2.2.4.51.1, section 2.2.4.52.1, section 2.2.4.53.1, section 2.2.4.54.1, section 2.2.4.55.1, section 2.2.4.57.1, section 2.2.4.58.1, section 2.2.4.59.1, section 2.2.4.60.1, section 2.2.4.61.1, section 2.2.4.62.1, section 2.2.4.63.1, section 2.2.4.64.1, section 2.2.4.65.1, section 2.2.4.66.1, section 2.2.4.67.1, section 2.2.4.68.1, section 2.2.4.69.1, section 2.2.5.1.1, section 2.2.5.4.1, section 2.2.5.6.1, section 2.2.5.7.1, section 2.2.5.9.1, section 2.2.5.11.1, section 2.2.6.8.1, section 2.2.6.9.1, section 2.2.7.1.1, section 2.2.7.2.1, section 2.2.7.3.1, section 2.2.7.4.1, section 2.2.7.6.1)

Response packet (section 2.2.4.2.2, section 2.2.4.3.2, section 2.2.4.4.2, section 2.2.4.5.2, section 2.2.4.6.2, section 2.2.4.7.2, section 2.2.4.8.2, section 2.2.4.9.2, section 2.2.4.10.2, section 2.2.4.11.2, section 2.2.4.12.2, section 2.2.4.13.2, section 2.2.4.14.2, section 2.2.4.15.2, section 2.2.4.16.2, section 2.2.4.17.2, section 2.2.4.18.2, section 2.2.4.19.2, section 2.2.4.20.2, section 2.2.4.21.2, section 2.2.4.23.2, section 2.2.4.26.2, section 2.2.4.30.2, section 2.2.4.31.2, section 2.2.4.32.2, section 2.2.4.33.2, section 2.2.4.35.2, section 2.2.4.39.2, section 2.2.4.40.2, section 2.2.4.41.2, section 2.2.4.42.2, section 2.2.4.43.2, section 2.2.4.46.2, section 2.2.4.48.2, section 2.2.4.50.2, section 2.2.4.51.2, section 2.2.4.52.2, section 2.2.4.53.2, section 2.2.4.54.2, section 2.2.4.55.2, section 2.2.4.57.2, section 2.2.4.58.2, section 2.2.4.59.2, section 2.2.4.60.2, section 2.2.4.61.2, section 2.2.4.62.2, section 2.2.4.64.2, section 2.2.4.66.2, section 2.2.4.67.2, section 2.2.4.68.2, section 2.2.4.69.2, section 2.2.5.2.2, section 2.2.5.3.2, section 2.2.5.4.2, section 2.2.5.5.2, section 2.2.5.6.2, section 2.2.5.7.2, section 2.2.5.8.2, section 2.2.5.9.2, section 2.2.5.11.2, section 2.2.6.3.2, section 2.2.6.7.2, section 2.2.6.9.2, section 2.2.6.14.2, section 2.2.7.1.2, section 2.2.7.2.2, section 2.2.7.4.2, section 2.2.7.6.2)

S

SECONDS

Security

implementer considerations

overview

parameter index

Sequencing rules

client

algorithms for challenge/response authentication

OpLock

break notification

grant

receiving any message (section 3.1.5.1, section 3.2.5.1)

RPC

algorithms for challenge/response authentication

overview

receiving any message

SMB_COM_CLOSE response

SMB_COM_CREATE response

SMB_COM_CREATE_NEW response

SMB_COM_CREATE_TEMPORARY response

SMB_COM_ECHO response

SMB_COM_FIND response

SMB_COM_FIND_CLOSE2 response

SMB_COM_FIND_UNIQUE response

SMB_COM_IOCTL response

SMB_COM_LOCK_AND_READ response

SMB_COM_LOGOFF_ANDX response

SMB_COM_NEGOTIATE response

SMB_COM_NT_CREATE_ANDX response

SMB_COM_NT_TRANSACT response

SMB_COM_NT_TRANSACT subcommand response

SMB_COM_OPEN response

SMB_COM_OPEN_ANDX response

SMB_COM_OPEN_PRINT_FILE response

SMB_COM_QUERY_INFORMATION response

SMB_COM_QUERY_INFORMATION_DISK response

SMB_COM_QUERY_INFORMATION2 response

SMB_COM_READ response

SMB_COM_READ_ANDX response

SMB_COM_READ_MPX response

SMB_COM_READ_RAW response

SMB_COM_SEARCH response

SMB_COM_SEEK response

SMB_COM_SESSION_SETUP_ANDX response

SMB_COM_TRANSACTION response

SMB_COM_TRANSACTION subcommand response

SMB_COM_TRANSACTION2 response

SMB_COM_TRANSACTION2 subcommand response

SMB_COM_TREE_CONNECT response

SMB_COM_TREE_CONNECT_ANDX response

SMB_COM_TREE_DISCONNECT response

SMB_COM_WRITE response

SMB_COM_WRITE_AND_CLOSE response

SMB_COM_WRITE_AND_UNLOCK response

SMB_COM_WRITE_ANDX response

SMB_COM_WRITE_MPX response

SMB_COM_WRITE_RAW response

STATUS_PATH_NOT_COVERED

server

algorithms for challenge/response authentication

incoming connection

receiving any message (section 3.1.5.1, section 3.3.5.2)

RPC

algorithms for challenge/response authentication

overview

receiving any message

SMB_COM_CHECK_DIRECTORY request

SMB_COM_CLOSE request

SMB_COM_CLOSE_PRINT_FILE request

SMB_COM_CREATE request

SMB_COM_CREATE_DIRECTORY request

SMB_COM_CREATE_NEW request

SMB_COM_CREATE_TEMPORARY request

SMB_COM_DELETE request

SMB_COM_DELETE_DIRECTORY request

SMB_COM_ECHO request

SMB_COM_FIND request

SMB_COM_FIND_CLOSE request

SMB_COM_FIND_CLOSE2 request

SMB_COM_FIND_UNIQUE request

SMB_COM_FLUSH request

SMB_COM_IOCTL request

SMB_COM_LOCK_AND_READ request

SMB_COM_LOCK_BYTE_RANGE request

SMB_COM_LOCKING_ANDX request

SMB_COM_LOGOFF_ANDX request

SMB_COM_NEGOTIATE request

SMB_COM_NT_CANCEL request

SMB_COM_NT_CREATE_ANDX request

SMB_COM_NT_RENAME request

SMB_COM_NT_TRANSACT request

SMB_COM_NT_TRANSACT subcommand request

SMB_COM_OPEN request

SMB_COM_OPEN_ANDX request

SMB_COM_OPEN_PRINT_FILE request

SMB_COM_PROCESS_EXIT request

SMB_COM_QUERY_INFORMATION request

SMB_COM_QUERY_INFORMATION_DISK request

SMB_COM_QUERY_INFORMATION2 request

SMB_COM_READ request

SMB_COM_READ_ANDX request

SMB_COM_READ_MPX request

SMB_COM_READ_RAW request

SMB_COM_RENAME request

SMB_COM_SEARCH request

SMB_COM_SEEK request

SMB_COM_SESSION_SETUP_ANDX request

SMB_COM_SET_INFORMATION request

SMB_COM_SET_INFORMATION2 request

SMB_COM_TRANSACTION request

SMB_COM_TRANSACTION subcommand request

SMB_COM_TRANSACTION2 request

SMB_COM_TRANSACTION2 subcommand request

SMB_COM_TREE_CONNECT request

SMB_COM_TREE_CONNECT_ANDX request

SMB_COM_TREE_DISCONNECT request

SMB_COM_UNLOCK_BYTE_RANGE request

SMB_COM_WRITE request

SMB_COM_WRITE_AND_CLOSE request

SMB_COM_WRITE_AND_UNLOCK request

SMB_COM_WRITE_ANDX request

SMB_COM_WRITE_MPX request

SMB_COM_WRITE_PRINT_FILE request

SMB_COM_WRITE_RAW request

Server

abstract data model

global (section 3.1.1.1, section 3.3.1.1)

overview (section 3.1.1, section 3.3.1)

share

SMB

command - pending

connection

session

tree connect

unique

open

open search

higher-layer triggered events

client session

security context

session key

configuration - updating

DFS subsystem

active

DFS share

not a DFS share

disabling

enabling

open

closing

querying

OpLock break

pausing

resuming

sending any message (section 3.1.4.1, section 3.3.4.1)

session

closing

querying

share

deregistering

querying

registering

updating

statistics

transport binding change

TreeConnect - querying

initialization (section 3.1.3, section 3.3.3)

local events

disconnecting connection

handling

incoming transport connection

transport disconnect

overview

message processing

algorithms for challenge/response authentication

incoming connection

receiving any message (section 3.1.5.1, section 3.3.5.2)

SMB_COM_CHECK_DIRECTORY request

SMB_COM_CLOSE request

SMB_COM_CLOSE_PRINT_FILE request

SMB_COM_CREATE request

SMB_COM_CREATE_DIRECTORY request

SMB_COM_CREATE_NEW request

SMB_COM_CREATE_TEMPORARY request

SMB_COM_DELETE request

SMB_COM_DELETE_DIRECTORY request

SMB_COM_ECHO request

SMB_COM_FIND request

SMB_COM_FIND_CLOSE request

SMB_COM_FIND_CLOSE2 request

SMB_COM_FIND_UNIQUE request

SMB_COM_FLUSH request

SMB_COM_IOCTL request

SMB_COM_LOCK_AND_READ request

SMB_COM_LOCK_BYTE_RANGE request

SMB_COM_LOCKING_ANDX request

SMB_COM_LOGOFF_ANDX request

SMB_COM_NEGOTIATE request

SMB_COM_NT_CANCEL request

SMB_COM_NT_CREATE_ANDX request

SMB_COM_NT_RENAME request

SMB_COM_NT_TRANSACT request

SMB_COM_NT_TRANSACT subcommand request

SMB_COM_OPEN request

SMB_COM_OPEN_ANDX request

SMB_COM_OPEN_PRINT_FILE request

SMB_COM_PROCESS_EXIT request

SMB_COM_QUERY_INFORMATION request

SMB_COM_QUERY_INFORMATION_DISK request

SMB_COM_QUERY_INFORMATION2 request

SMB_COM_READ request

SMB_COM_READ_ANDX request

SMB_COM_READ_MPX request

SMB_COM_READ_RAW request

SMB_COM_RENAME request

SMB_COM_SEARCH request

SMB_COM_SEEK request

SMB_COM_SESSION_SETUP_ANDX request

SMB_COM_SET_INFORMATION request

SMB_COM_SET_INFORMATION2 request

SMB_COM_TRANSACTION request

SMB_COM_TRANSACTION subcommand request

SMB_COM_TRANSACTION2 request

SMB_COM_TRANSACTION2 subcommand request

SMB_COM_TREE_CONNECT request

SMB_COM_TREE_CONNECT_ANDX request

SMB_COM_TREE_DISCONNECT request

SMB_COM_UNLOCK_BYTE_RANGE request

SMB_COM_WRITE request

SMB_COM_WRITE_AND_CLOSE request

SMB_COM_WRITE_AND_UNLOCK request

SMB_COM_WRITE_ANDX request

SMB_COM_WRITE_MPX request

SMB_COM_WRITE_PRINT_FILE request

SMB_COM_WRITE_RAW request

RPC

abstract data model

global

overview (section 3.1.1, section 3.5.1)

higher-layer triggered events

named pipe

closing its open

waiting for clients to open

security context

sending any message

session key

initialization (section 3.1.3, section 3.5.3)

local events (section 3.1.7, section 3.5.7)

message processing

algorithms for challenge/response authentication

overview

receiving any message

overview

sequencing rules

algorithms for challenge/response authentication

overview

receiving any message

timer events (section 3.1.6, section 3.5.6)

timers (section 3.1.2, section 3.5.2)

sequencing rules

algorithms for challenge/response authentication

incoming connection

receiving any message (section 3.1.5.1, section 3.3.5.2)

SMB_COM_CHECK_DIRECTORY request

SMB_COM_CLOSE request

SMB_COM_CLOSE_PRINT_FILE request

SMB_COM_CREATE request

SMB_COM_CREATE_DIRECTORY request

SMB_COM_CREATE_NEW request

SMB_COM_CREATE_TEMPORARY request

SMB_COM_DELETE request

SMB_COM_DELETE_DIRECTORY request

SMB_COM_ECHO request

SMB_COM_FIND request

SMB_COM_FIND_CLOSE request

SMB_COM_FIND_CLOSE2 request

SMB_COM_FIND_UNIQUE request

SMB_COM_FLUSH request

SMB_COM_IOCTL request

SMB_COM_LOCK_AND_READ request

SMB_COM_LOCK_BYTE_RANGE request

SMB_COM_LOCKING_ANDX request

SMB_COM_LOGOFF_ANDX request

SMB_COM_NEGOTIATE request

SMB_COM_NT_CANCEL request

SMB_COM_NT_CREATE_ANDX request

SMB_COM_NT_RENAME request

SMB_COM_NT_TRANSACT request

SMB_COM_NT_TRANSACT subcommand request

SMB_COM_OPEN request

SMB_COM_OPEN_ANDX request

SMB_COM_OPEN_PRINT_FILE request

SMB_COM_PROCESS_EXIT request

SMB_COM_QUERY_INFORMATION request

SMB_COM_QUERY_INFORMATION_DISK request

SMB_COM_QUERY_INFORMATION2 request

SMB_COM_READ request

SMB_COM_READ_ANDX request

SMB_COM_READ_MPX request

SMB_COM_READ_RAW request

SMB_COM_RENAME request

SMB_COM_SEARCH request

SMB_COM_SEEK request

SMB_COM_SESSION_SETUP_ANDX request

SMB_COM_SET_INFORMATION request

SMB_COM_SET_INFORMATION2 request

SMB_COM_TRANSACTION request

SMB_COM_TRANSACTION subcommand request

SMB_COM_TRANSACTION2 request

SMB_COM_TRANSACTION2 subcommand request

SMB_COM_TREE_CONNECT request

SMB_COM_TREE_CONNECT_ANDX request

SMB_COM_TREE_DISCONNECT request

SMB_COM_UNLOCK_BYTE_RANGE request

SMB_COM_WRITE request

SMB_COM_WRITE_AND_CLOSE request

SMB_COM_WRITE_AND_UNLOCK request

SMB_COM_WRITE_ANDX request

SMB_COM_WRITE_MPX request

SMB_COM_WRITE_PRINT_FILE request

SMB_COM_WRITE_RAW request

timer events

idle connection

OpLock break acknowledgment

overview

unused open search

timers

Set file attributes example

SMB commands

SMB_COM_CHECK_DIRECTORY (0x10)

SMB_COM_CLOSE (0x04)

SMB_COM_CLOSE_AND_TREE_DISC (0x31)

SMB_COM_CLOSE_PRINT_FILE (0xC2)

SMB_COM_COPY (0x29)

SMB_COM_CREATE (0x03)

SMB_COM_CREATE_DIRECTORY (0x00)

SMB_COM_CREATE_NEW (0x0F)

SMB_COM_CREATE_TEMPORARY (0x0E)

SMB_COM_DELETE (0x06)

SMB_COM_DELETE_DIRECTORY (0x01)

SMB_COM_ECHO (0x2B)

SMB_COM_FIND (0x82)

SMB_COM_FIND_CLOSE (0x84)

SMB_COM_FIND_CLOSE2 (0x34)

SMB_COM_FIND_NOTIFY_CLOSE (0x35)

SMB_COM_FIND_UNIQUE (0x83)

SMB_COM_FLUSH (0x05)

SMB_COM_GET_PRINT_QUEUE (0xC3)

SMB_COM_INVALID (0xFE)

SMB_COM_IOCTL (0x27)

SMB_COM_IOCTL_SECONDARY (0x28)

SMB_COM_LOCK_AND_READ (0x13)

SMB_COM_LOCK_BYTE_RANGE (0x0C)

SMB_COM_LOCKING_ANDX (0x24)

SMB_COM_LOGOFF_ANDX (0x74)

SMB_COM_MOVE (0x2A)

SMB_COM_NEGOTIATE (0x72)

SMB_COM_NEW_FILE_SIZE (0x30)

SMB_COM_NO_ANDX_COMMAND (0xFF)

SMB_COM_NT_CANCEL (0xA4)

SMB_COM_NT_CREATE_ANDX (0xA2)

SMB_COM_NT_RENAME (0xA5)

SMB_COM_NT_TRANSACT (0xA0)

SMB_COM_NT_TRANSACT_SECONDARY (0xA1)

SMB_COM_OPEN (0x02)

SMB_COM_OPEN_ANDX (0x2D)

SMB_COM_OPEN_PRINT_FILE (0xC0)

SMB_COM_PROCESS_EXIT (0x11)

SMB_COM_QUERY_INFORMATION (0x08)

SMB_COM_QUERY_INFORMATION_DISK (0x80)

SMB_COM_QUERY_INFORMATION2 (0x23)

SMB_COM_QUERY_SERVER (0x21)

SMB_COM_READ (0x0A)

SMB_COM_READ_ANDX (0x2E)

SMB_COM_READ_BULK (0xD8)

SMB_COM_READ_MPX (0x1B)

SMB_COM_READ_MPX_SECONDARY (0x1C)

SMB_COM_READ_RAW (0x1A)

SMB_COM_RENAME (0x07)

SMB_COM_SEARCH (0x81)

SMB_COM_SECURITY_PACKAGE_ANDX (0x7E)

SMB_COM_SEEK (0x12)

SMB_COM_SESSION_SETUP_ANDX (0x73)

SMB_COM_SET_INFORMATION (0x09)

SMB_COM_SET_INFORMATION2 (0x22)

SMB_COM_TRANSACTION (0x25)

SMB_COM_TRANSACTION_SECONDARY (0x26)

SMB_COM_TRANSACTION2 (0x32)

SMB_COM_TRANSACTION2_SECONDARY (0x33)

SMB_COM_TREE_CONNECT (0x70)

SMB_COM_TREE_CONNECT_ANDX (0x75)

SMB_COM_TREE_DISCONNECT (0x71)

SMB_COM_UNLOCK_BYTE_RANGE (0x0D)

SMB_COM_WRITE (0x0B)

SMB_COM_WRITE_AND_CLOSE (0x2C)

SMB_COM_WRITE_AND_UNLOCK (0x14)

SMB_COM_WRITE_ANDX (0x2F)

SMB_COM_WRITE_BULK (0xD9)

SMB_COM_WRITE_BULK_DATA (0xDA)

SMB_COM_WRITE_COMPLETE (0x20)

SMB_COM_WRITE_MPX (0x1E)

SMB_COM_WRITE_MPX_SECONDARY (0x1F)

SMB_COM_WRITE_PRINT_FILE (0xC1)

SMB_COM_WRITE_RAW (0x1D)

SMB message structure

batched messages ("AndX" messages)

data block

overview

parameter block

SMB_Header

SMB_COM_CREATE_DIRECTORY_REQUEST packet

SMB_COM_CREATE_DIRECTORY_RESPONSE packet

SMB_Data packet

SMB_ERROR data type

SMB_ERROR packet

SMB_FEA packet

SMB_FEA_LIST packet

SMB_FILE_ATTRIBUTE_ARCHIVE

SMB_FILE_ATTRIBUTE_DIRECTORY

SMB_FILE_ATTRIBUTE_HIDDEN

SMB_FILE_ATTRIBUTE_NORMAL

SMB_FILE_ATTRIBUTE_READONLY

SMB_FILE_ATTRIBUTE_SYSTEM

SMB_FILE_ATTRIBUTE_VOLUME

SMB_FIND_FILE_BOTH_DIRECTORY_INFO packet

SMB_FIND_FILE_DIRECTORY_INFO packet

SMB_FIND_FILE_FULL_DIRECTORY_INFO packet

SMB_FIND_FILE_NAMES_INFO packet

SMB_GEA packet

SMB_GEA_LIST packet

SMB_Header packet

SMB_INFO_ALLOCATION packet

SMB_INFO_QUERY_ALL_EAS packet

SMB_INFO_QUERY_EA_SIZE packet (section 2.2.8.1.2, section 2.2.8.3.2)

SMB_INFO_QUERY_EAS_FROM_LIST packet (section 2.2.8.1.3, section 2.2.8.3.3)

SMB_INFO_SET_EAS packet

SMB_INFO_STANDARD packet (section 2.2.8.1.1, section 2.2.8.3.1, section 2.2.8.4.1)

SMB_INFO_VOLUME packet

SMB_NMPIPE_STATUS data type

SMB_Parameters packet

SMB_QUERY_FILE_ALL_INFO packet

SMB_QUERY_FILE_ALT_NAME_INFO packet

SMB_QUERY_FILE_BASIC_INFO packet

SMB_QUERY_FILE_COMRESSION_INFO packet

SMB_QUERY_FILE_EA_INFO packet

SMB_QUERY_FILE_NAME_INFO packet

SMB_QUERY_FILE_STANDARD_INFO packet

SMB_QUERY_FILE_STREAM_INFO packet

SMB_QUERY_FS_ATTRIBUTE_INFO packet

SMB_QUERY_FS_DEVICE_INFO packet

SMB_QUERY_FS_SIZE_INFO packet

SMB_QUERY_FS_VOLUME_INFO packet

SMB_SEARCH_ATTRIBUTE_ARCHIVE

SMB_SEARCH_ATTRIBUTE_DIRECTORY

SMB_SEARCH_ATTRIBUTE_HIDDEN

SMB_SEARCH_ATTRIBUTE_READONLY

SMB_SEARCH_ATTRIBUTE_SYSTEM

SMB_SET_FILE_ALLOCATION_INFO packet

SMB_SET_FILE_BASIC_INFO packet

SMB_SET_FILE_DISPOSITION_INFO packet

SMB_SET_FILE_END_OF_FILE_INFO packet

Standards assignments

Structures - SMB message

batched messages ("AndX" messages)

data block

overview

parameter block

SMB_Header

Subcommand codes - transaction

Subcommands

NT Transact

NT_TRANSACT_CREATE (0x0001)

NT_TRANSACT_IOCTL (0x0002)

NT_TRANSACT_NOTIFY_CHANGE (0x0004)

NT_TRANSACT_QUERY_SECURITY_DESC (0x0006)

NT_TRANSACT_RENAME (0x0005)

NT_TRANSACT_SET_SECURITY_DESC (0x0003)

Transaction

overview

TRANS_CALL_NMPIPE (0x0054)

TRANS_MAILSLOT_WRITE (0x0001)

TRANS_PEEK_NMPIPE (0x0023)

TRANS_QUERY_NMPIPE_INFO (0x0022)

TRANS_QUERY_NMPIPE_STATE (0x0021)

TRANS_RAW_READ_NMPIPE (0x0011)

TRANS_RAW_WRITE_NMPIPE (0x0031)

TRANS_READ_NMPIPE (0x0036)

TRANS_SET_NMPIPE_STATE (0x0001)

TRANS_TRANSACT_NMPIPE (0x0026)

TRANS_WAIT_NMPIPE (0x0053)

TRANS_WRITE_NMPIPE (0x0037)

Transaction2

TRANS2_CREATE_DIRECTORY (0x000D)

TRANS2_FIND_FIRST2 (0x0001)

TRANS2_FIND_NEXT2 (0x0002)

TRANS2_FIND_NOTIFY_FIRST (0x000B)

TRANS2_FIND_NOTIFY_NEXT (0x000C)

TRANS2_FSCTL (0x0009)

TRANS2_GET_DFS_REFERRAL (0x0010)

TRANS2_IOCTL2 (0x000A)

TRANS2_OPEN2 (0x0000)

TRANS2_QUERY_FILE_INFORMATION (0x0007)

TRANS2_QUERY_FS_INFORMATION (0x0003)

TRANS2_QUERY_PATH_INFORMATION (0x0005)

TRANS2_REPORT_DFS_INCONSISTENCY (0x0011)

TRANS2_SESSION_SETUP (0x000E)

TRANS2_SET_FILE_INFORMATION (0x0008)

TRANS2_SET_FS_INFORMATION (0x0004)

TRANS2_SET_PATH_INFORMATION (0x0006)

Syntax

T

Time data type

Timer events

client

overview

request expiration

RPC (section 3.1.6, section 3.4.6)

server

idle connection

OpLock break acknowledgment

overview

RPC (section 3.1.6, section 3.5.6)

unused open search

Timers

client

idle connection

OpLock break acknowledgment

overview

request expiration

RPC (section 3.1.2, section 3.4.2)

unused open search

server

overview

RPC (section 3.1.2, section 3.5.2)

Tracking changes

TRANS2_FIND_FIRST2_REQUEST packet

TRANS2_FIND_NEXT2_REQUEST packet

TRANS2_OPEN2_REQUEST packet

TRANS2_OPEN2_RESPONSE packet

Transaction subcommands

overview

TRANS_CALL_NMPIPE (0x0054)

TRANS_MAILSLOT_WRITE (0x0001)

TRANS_PEEK_NMPIPE (0x0023)

TRANS_QUERY_NMPIPE_INFO (0x0022)

TRANS_QUERY_NMPIPE_STATE (0x0021)

TRANS_RAW_READ_NMPIPE (0x0011)

TRANS_RAW_WRITE_NMPIPE (0x0031)

TRANS_READ_NMPIPE (0x0036)

TRANS_SET_NMPIPE_STATE (0x0001)

TRANS_TRANSACT_NMPIPE (0x0026)

TRANS_WAIT_NMPIPE (0x0053)

TRANS_WRITE_NMPIPE (0x0037)

Transaction2 subcommands

TRANS2_CREATE_DIRECTORY (0x000D)

TRANS2_FIND_FIRST2 (0x0001)

TRANS2_FIND_NEXT2 (0x0002)

TRANS2_FIND_NOTIFY_FIRST (0x000B)

TRANS2_FIND_NOTIFY_NEXT (0x000C)

TRANS2_FSCTL (0x0009)

TRANS2_GET_DFS_REFERRAL (0x0010)

TRANS2_IOCTL2 (0x000A)

TRANS2_OPEN2 (0x0000)

TRANS2_QUERY_FILE_INFORMATION (0x0007)

TRANS2_QUERY_FS_INFORMATION (0x0003)

TRANS2_QUERY_PATH_INFORMATION (0x0005)

TRANS2_REPORT_DFS_INCONSISTENCY (0x0011)

TRANS2_SESSION_SETUP (0x000E)

TRANS2_SET_FILE_INFORMATION (0x0008)

TRANS2_SET_FS_INFORMATION (0x0004)

TRANS2_SET_PATH_INFORMATION (0x0006)

Transport

NetBIOS

frames

over

IPX/SPX

TCP/UDP

overview

Transports

direct hosting

direct IPX

NetBIOS-based transports

other

overview

virtual circuits

Triggered events

client

cryptographic session key - querying

device

reading

writing

DFS

querying referrals

subsystem active

directory

contents change notification

creating

deleting

enumeration

verifying path

file

attributes

querying

setting

byte-range lock

byte-range lock - release

closing

create or overwrite

creating a hard link

deleting

flushing data

opening an existing

opportunistic lock

print

reading

renaming

seek to a location

sending IOCTL

system attributes - querying

writing

named pipe

exchange (call)

executing a transaction

peeking at data

querying

handle state

information

reading (section 3.2.4.14, section 3.2.4.37)

setting state

waiting for availability

writing (section 3.2.4.15, section 3.2.4.38)

named RAP transaction

number of opens on tree connect

operations - canceling pending

process exit notification

RPC

DFS referrals - querying

extended DFS referral capability - querying

named pipe

closing

opening

reading

transaction - issuing

writing

sending any message

session

initiating

key - authenticated context

terminating

share connection - requesting

tree disconnect - requesting

security descriptors

querying

setting

sending any message (section 3.1.4.1, section 3.2.4.1)

share - connecting

SMB session logoff

transport layer connection - testing

tree disconnect (unmount share)

server

client session

security context

session key

configuration - updating

DFS subsystem

active

DFS share

not a DFS share

disabling

enabling

open

closing

querying

OpLock break

pausing

resuming

RPC

named pipe

closing its open

waiting for clients to open

security context

sending any message

session key

sending any message (section 3.1.4.1, section 3.3.4.1)

session

closing

querying

share

deregistering

querying

registering

updating

statistics

transport binding change

TreeConnect - querying

U

Unique identifiers data type

V

Vendor-extensible fields

Versioning

Virtual circuits

Y

YEAR

 
Show:
© 2014 Microsoft