8 Index

A

Abstract data model

   client

      global (section 3.1.1.1, section 3.2.1.1)

      overview (section 3.1.1, section 3.2.1)

      RPC

         global

         overview (section 3.1.1, section 3.4.1)

      SMB

         connection

         session

      tree connect

      unique

         open

         open search

   server

      global (section 3.1.1.1, section 3.3.1.1)

      overview (section 3.1.1, section 3.3.1)

      RPC

         global

         overview (section 3.1.1, section 3.5.1)

      share

      SMB

         command - pending

         connection

         session

      tree connect

      unique

         open

         open search

AndX packet

Applicability

C

Capability negotiation

Change tracking

Character sequences data type

Client

   abstract data model

      global (section 3.1.1.1, section 3.2.1.1)

      overview (section 3.1.1, section 3.2.1)

      SMB

         connection

         session

      tree connect

      unique

         open

         open search

   higher-layer triggered events

      cryptographic session key - querying

      device

         reading

         writing

      DFS

         querying referrals

         subsystem active

      directory

         contents change notification

         creating

         deleting

         enumeration

         verifying path

      file

         attributes

            querying

            setting

         byte-range lock

         byte-range lock - release

         closing

         create or overwrite

         creating a hard link

         deleting

         flushing data

         opening an existing

         opportunistic lock

         print

         reading

         renaming

         seek to a location

         sending IOCTL

         system attributes - querying

         writing

      named pipe

         exchange (call)

         executing a transaction

         peeking at data

         querying

            handle state

            information

         reading (section 3.2.4.14, section 3.2.4.37)

         setting state

         waiting for availability

         writing (section 3.2.4.15, section 3.2.4.38)

      named RAP transaction

      number of opens on tree connect

      operations - canceling pending

      process exit notification

      security descriptors

         querying

         setting

      sending any message (section 3.1.4.1, section 3.2.4.1)

      share - connecting

      SMB session logoff

      transport layer connection - testing

      tree disconnect (unmount share)

   initialization (section 3.1.3, section 3.2.3)

   local events

      handling transport disconnect

      overview

   message processing

      algorithms for challenge/response authentication

      OpLock

         break notification

         grant

      receiving any message (section 3.1.5.1, section 3.2.5.1)

      SMB_COM_CLOSE response

      SMB_COM_CREATE response

      SMB_COM_CREATE_NEW response

      SMB_COM_CREATE_TEMPORARY response

      SMB_COM_ECHO response

      SMB_COM_FIND response

      SMB_COM_FIND_CLOSE2 response

      SMB_COM_FIND_UNIQUE response

      SMB_COM_IOCTL response

      SMB_COM_LOCK_AND_READ response

      SMB_COM_LOGOFF_ANDX response

      SMB_COM_NEGOTIATE response

      SMB_COM_NT_CREATE_ANDX response

      SMB_COM_NT_TRANSACT response

      SMB_COM_NT_TRANSACT subcommand response

      SMB_COM_OPEN response

      SMB_COM_OPEN_ANDX response

      SMB_COM_OPEN_PRINT_FILE response

      SMB_COM_QUERY_INFORMATION response

      SMB_COM_QUERY_INFORMATION_DISK response

      SMB_COM_QUERY_INFORMATION2 response

      SMB_COM_READ response

      SMB_COM_READ_ANDX response

      SMB_COM_READ_MPX response

      SMB_COM_READ_RAW response

      SMB_COM_SEARCH response

      SMB_COM_SEEK response

      SMB_COM_SESSION_SETUP_ANDX response

      SMB_COM_TRANSACTION response

      SMB_COM_TRANSACTION subcommand response

      SMB_COM_TRANSACTION2 response

      SMB_COM_TRANSACTION2 subcommand response

      SMB_COM_TREE_CONNECT response

      SMB_COM_TREE_CONNECT_ANDX response

      SMB_COM_TREE_DISCONNECT response

      SMB_COM_WRITE response

      SMB_COM_WRITE_AND_CLOSE response

      SMB_COM_WRITE_AND_UNLOCK response

      SMB_COM_WRITE_ANDX response

      SMB_COM_WRITE_MPX response

      SMB_COM_WRITE_RAW response

      STATUS_PATH_NOT_COVERED

   overview

   RPC

      abstract data model

         global

         overview (section 3.1.1, section 3.4.1)

      higher-layer triggered events

         DFS referrals - querying

         extended DFS referral capability - querying

         named pipe

            closing

            opening

            reading

            transaction - issuing

            writing

         sending any message

         session

            initiating

            key - authenticated context

            terminating

         share connection - requesting

         tree disconnect - requesting

      initialization (section 3.1.3, section 3.4.3)

      local events (section 3.1.7, section 3.4.7)

      message processing

         algorithms for challenge/response authentication

         overview

         receiving any message

      overview

      sequencing rules

         algorithms for challenge/response authentication

         overview

         receiving any message

      timer events (section 3.1.6, section 3.4.6)

      timers (section 3.1.2, section 3.4.2)

   sequencing rules

      algorithms for challenge/response authentication

      OpLock

         break notification

         grant

      receiving any message (section 3.1.5.1, section 3.2.5.1)

      SMB_COM_CLOSE response

      SMB_COM_CREATE response

      SMB_COM_CREATE_NEW response

      SMB_COM_CREATE_TEMPORARY response

      SMB_COM_ECHO response

      SMB_COM_FIND response

      SMB_COM_FIND_CLOSE2 response

      SMB_COM_FIND_UNIQUE response

      SMB_COM_IOCTL response

      SMB_COM_LOCK_AND_READ response

      SMB_COM_LOGOFF_ANDX response

      SMB_COM_NEGOTIATE response

      SMB_COM_NT_CREATE_ANDX response

      SMB_COM_NT_TRANSACT response

      SMB_COM_NT_TRANSACT subcommand response

      SMB_COM_OPEN response

      SMB_COM_OPEN_ANDX response

      SMB_COM_OPEN_PRINT_FILE response

      SMB_COM_QUERY_INFORMATION response

      SMB_COM_QUERY_INFORMATION_DISK response

      SMB_COM_QUERY_INFORMATION2 response

      SMB_COM_READ response

      SMB_COM_READ_ANDX response

      SMB_COM_READ_MPX response

      SMB_COM_READ_RAW response

      SMB_COM_SEARCH response

      SMB_COM_SEEK response

      SMB_COM_SESSION_SETUP_ANDX response

      SMB_COM_TRANSACTION response

      SMB_COM_TRANSACTION subcommand response

      SMB_COM_TRANSACTION2 response

      SMB_COM_TRANSACTION2 subcommand response

      SMB_COM_TREE_CONNECT response

      SMB_COM_TREE_CONNECT_ANDX response

      SMB_COM_TREE_DISCONNECT response

      SMB_COM_WRITE response

      SMB_COM_WRITE_AND_CLOSE response

      SMB_COM_WRITE_AND_UNLOCK response

      SMB_COM_WRITE_ANDX response

      SMB_COM_WRITE_MPX response

      SMB_COM_WRITE_RAW response

      STATUS_PATH_NOT_COVERED

   timer events

      overview

      request expiration

   timers

      idle connection

      OpLock break acknowledgment

      overview

      request expiration

      unused open search

Codes

   command - SMB_COM

   data buffer format

   information level

   SMB error classes

   subcommand - transaction

Command codes - SMB_COM

Commands - SMB

   SMB_COM_CHECK_DIRECTORY (0x10)

   SMB_COM_CLOSE (0x04)

   SMB_COM_CLOSE_AND_TREE_DISC (0x31)

   SMB_COM_CLOSE_PRINT_FILE (0xC2)

   SMB_COM_COPY (0x29)

   SMB_COM_CREATE (0x03)

   SMB_COM_CREATE_DIRECTORY (0x00)

   SMB_COM_CREATE_NEW (0x0F)

   SMB_COM_CREATE_TEMPORARY (0x0E)

   SMB_COM_DELETE (0x06)

   SMB_COM_DELETE_DIRECTORY (0x01)

   SMB_COM_ECHO (0x2B)

   SMB_COM_FIND (0x82)

   SMB_COM_FIND_CLOSE (0x84)

   SMB_COM_FIND_CLOSE2 (0x34)

   SMB_COM_FIND_NOTIFY_CLOSE (0x35)

   SMB_COM_FIND_UNIQUE (0x83)

   SMB_COM_FLUSH (0x05)

   SMB_COM_GET_PRINT_QUEUE (0xC3)

   SMB_COM_INVALID (0xFE)

   SMB_COM_IOCTL (0x27)

   SMB_COM_IOCTL_SECONDARY (0x28)

   SMB_COM_LOCK_AND_READ (0x13)

   SMB_COM_LOCK_BYTE_RANGE (0x0C)

   SMB_COM_LOCKING_ANDX (0x24)

   SMB_COM_LOGOFF_ANDX (0x74)

   SMB_COM_MOVE (0x2A)

   SMB_COM_NEGOTIATE (0x72)

   SMB_COM_NEW_FILE_SIZE (0x30)

   SMB_COM_NO_ANDX_COMMAND (0xFF)

   SMB_COM_NT_CANCEL (0xA4)

   SMB_COM_NT_CREATE_ANDX (0xA2)

   SMB_COM_NT_RENAME (0xA5)

   SMB_COM_NT_TRANSACT (0xA0)

   SMB_COM_NT_TRANSACT_SECONDARY (0xA1)

   SMB_COM_OPEN (0x02)

   SMB_COM_OPEN_ANDX (0x2D)

   SMB_COM_OPEN_PRINT_FILE (0xC0)

   SMB_COM_PROCESS_EXIT (0x11)

   SMB_COM_QUERY_INFORMATION (0x08)

   SMB_COM_QUERY_INFORMATION_DISK (0x80)

   SMB_COM_QUERY_INFORMATION2 (0x23)

   SMB_COM_QUERY_SERVER (0x21)

   SMB_COM_READ (0x0A)

   SMB_COM_READ_ANDX (0x2E)

   SMB_COM_READ_BULK (0xD8)

   SMB_COM_READ_MPX (0x1B)

   SMB_COM_READ_MPX_SECONDARY (0x1C)

   SMB_COM_READ_RAW (0x1A)

   SMB_COM_RENAME (0x07)

   SMB_COM_SEARCH (0x81)

   SMB_COM_SECURITY_PACKAGE_ANDX (0x7E)

   SMB_COM_SEEK (0x12)

   SMB_COM_SESSION_SETUP_ANDX (0x73)

   SMB_COM_SET_INFORMATION (0x09)

   SMB_COM_SET_INFORMATION2 (0x22)

   SMB_COM_TRANSACTION (0x25)

   SMB_COM_TRANSACTION_SECONDARY (0x26)

   SMB_COM_TRANSACTION2 (0x32)

   SMB_COM_TRANSACTION2_SECONDARY (0x33)

   SMB_COM_TREE_CONNECT (0x70)

   SMB_COM_TREE_CONNECT_ANDX (0x75)

   SMB_COM_TREE_DISCONNECT (0x71)

   SMB_COM_UNLOCK_BYTE_RANGE (0x0D)

   SMB_COM_WRITE (0x0B)

   SMB_COM_WRITE_AND_CLOSE (0x2C)

   SMB_COM_WRITE_AND_UNLOCK (0x14)

   SMB_COM_WRITE_ANDX (0x2F)

   SMB_COM_WRITE_BULK (0xD9)

   SMB_COM_WRITE_BULK_DATA (0xDA)

   SMB_COM_WRITE_COMPLETE (0x20)

   SMB_COM_WRITE_MPX (0x1E)

   SMB_COM_WRITE_MPX_SECONDARY (0x1F)

   SMB_COM_WRITE_PRINT_FILE (0xC1)

   SMB_COM_WRITE_RAW (0x1D)

Common data types

Common Data Types message

Copy file

   from share example

   to share example

D

Data buffer format codes

Data model - abstract

   client

      global (section 3.1.1.1, section 3.2.1.1)

      overview (section 3.1.1, section 3.2.1)

      RPC

         global

         overview (section 3.1.1, section 3.4.1)

      SMB

         connection

         session

      tree connect

      unique

         open

         open search

   server

      global (section 3.1.1.1, section 3.3.1.1)

      overview (section 3.1.1, section 3.3.1)

      RPC

         global

         overview (section 3.1.1, section 3.5.1)

      share

      SMB

         command - pending

         connection

         session

      tree connect

      unique

         open

         open search

Data types

   character sequences

   common - overview

   file attributes

   SMB_ERROR

   SMB_NMPIPE_STATUS

   time

   unique identifiers

DAY

Direct hosting

Direct IPX

Disconnect example

E

Error classes and codes - SMB

Events

   local

      client

         handling transport disconnect

         overview

         RPC (section 3.1.7, section 3.4.7)

      server

         disconnecting connection

         handling

            incoming transport connection

            transport disconnect

         overview

         RPC (section 3.1.7, section 3.5.7)

   timer

      client

         overview

         request expiration

         RPC (section 3.1.6, section 3.4.6)

      server

         idle connection

         OpLock break acknowledgment

         overview

         RPC (section 3.1.6, section 3.5.6)

         unused open search

Examples

   copy file

      from share

      to share

   disconnect

   get file attributes

   message signing

   negotiate and tree connect

   overview

   set file attributes

F

Fields - vendor extensible

Fields - vendor-extensible

File attributes data type

Final_Server_Response packet

G

Get file attributes example

Glossary

H

Higher-layer triggered events

   client

      cryptographic session key - querying

      device

         reading

         writing

      DFS

         querying referrals

         subsystem active

      directory

         contents change notification

         creating

         deleting

         enumeration

         verifying path

      file

         attributes

            querying

            setting

         byte-range lock

         byte-range lock - release

         closing

         create or overwrite

         creating a hard link

         deleting

         flushing data

         opening an existing

         opportunistic lock

         print

         reading

         renaming

         seek to a location

         sending IOCTL

         system attributes - querying

         writing

      named pipe

         exchange (call)

         executing a transaction

         peeking at data

         querying

            handle state

            information

         reading (section 3.2.4.14, section 3.2.4.37)

         setting state

         waiting for availability

         writing (section 3.2.4.15, section 3.2.4.38)

      named RAP transaction

      number of opens on tree connect

      operations - canceling pending

      process exit notification

      RPC

         DFS referrals - querying

         extended DFS referral capability - querying

         named pipe

            closing

            opening

            reading

            transaction - issuing

            writing

         sending any message

         session

            initiating

            key - authenticated context

            terminating

         share connection - requesting

         tree disconnect - requesting

      security descriptors

         querying

         setting

      sending any message (section 3.1.4.1, section 3.2.4.1)

      share - connecting

      SMB session logoff

      transport layer connection - testing

      tree disconnect (unmount share)

   server

      client session

         security context

         session key

      configuration - updating

      DFS subsystem

         active

         DFS share

         not a DFS share

      disabling

      enabling

      open

         closing

         querying

      OpLock break

      pausing

      resuming

      RPC

         named pipe

            closing its open

            waiting for clients to open

         security context

         sending any message

         session key

      sending any message (section 3.1.4.1, section 3.3.4.1)

      session

         closing

         querying

      share

         deregistering

         querying

         registering

         updating

      statistics

      transport binding change

      TreeConnect - querying

HOUR

I

Implementer - security considerations

Index of security parameters

Information level

   codes

   overview

Information Levels message

Informative references

Initialization

   client

      overview (section 3.1.3, section 3.2.3)

      RPC (section 3.1.3, section 3.4.3)

   server

      overview (section 3.1.3, section 3.3.3)

      RPC (section 3.1.3, section 3.5.3)

Interim_Server_Response packet

Introduction

L

Local events

   client

      handling transport disconnect

      overview

      RPC (section 3.1.7, section 3.4.7)

   server

      disconnecting connection

      handling

         incoming transport connection

         transport disconnect

      overview

      RPC (section 3.1.7, section 3.5.7)

M

Message processing

   client

      algorithms for challenge/response authentication

      OpLock

         break notification

         grant

      receiving any message (section 3.1.5.1, section 3.2.5.1)

      RPC

         algorithms for challenge/response authentication

         overview

         receiving any message

      SMB_COM_CLOSE response

      SMB_COM_CREATE response

      SMB_COM_CREATE_NEW response

      SMB_COM_CREATE_TEMPORARY response

      SMB_COM_ECHO response

      SMB_COM_FIND response

      SMB_COM_FIND_CLOSE2 response

      SMB_COM_FIND_UNIQUE response

      SMB_COM_IOCTL response

      SMB_COM_LOCK_AND_READ response

      SMB_COM_LOGOFF_ANDX response

      SMB_COM_NEGOTIATE response

      SMB_COM_NT_CREATE_ANDX response

      SMB_COM_NT_TRANSACT response

      SMB_COM_NT_TRANSACT subcommand response

      SMB_COM_OPEN response

      SMB_COM_OPEN_ANDX response

      SMB_COM_OPEN_PRINT_FILE response

      SMB_COM_QUERY_INFORMATION response

      SMB_COM_QUERY_INFORMATION_DISK response

      SMB_COM_QUERY_INFORMATION2 response

      SMB_COM_READ response

      SMB_COM_READ_ANDX response

      SMB_COM_READ_MPX response

      SMB_COM_READ_RAW response

      SMB_COM_SEARCH response

      SMB_COM_SEEK response

      SMB_COM_SESSION_SETUP_ANDX response

      SMB_COM_TRANSACTION response

      SMB_COM_TRANSACTION subcommand response

      SMB_COM_TRANSACTION2 response

      SMB_COM_TRANSACTION2 subcommand response

      SMB_COM_TREE_CONNECT response

      SMB_COM_TREE_CONNECT_ANDX response

      SMB_COM_TREE_DISCONNECT response

      SMB_COM_WRITE response

      SMB_COM_WRITE_AND_CLOSE response

      SMB_COM_WRITE_AND_UNLOCK response

      SMB_COM_WRITE_ANDX response

      SMB_COM_WRITE_MPX response

      SMB_COM_WRITE_RAW response

      STATUS_PATH_NOT_COVERED

   server

      algorithms for challenge/response authentication

      incoming connection

      receiving any message (section 3.1.5.1, section 3.3.5.2)

      RPC

         algorithms for challenge/response authentication

         overview

         receiving any message

      SMB_COM_CHECK_DIRECTORY request

      SMB_COM_CLOSE request

      SMB_COM_CLOSE_PRINT_FILE request

      SMB_COM_CREATE request

      SMB_COM_CREATE_DIRECTORY request

      SMB_COM_CREATE_NEW request

      SMB_COM_CREATE_TEMPORARY request

      SMB_COM_DELETE request

      SMB_COM_DELETE_DIRECTORY request

      SMB_COM_ECHO request

      SMB_COM_FIND request

      SMB_COM_FIND_CLOSE request

      SMB_COM_FIND_CLOSE2 request

      SMB_COM_FIND_UNIQUE request

      SMB_COM_FLUSH request

      SMB_COM_IOCTL request

      SMB_COM_LOCK_AND_READ request

      SMB_COM_LOCK_BYTE_RANGE request

      SMB_COM_LOCKING_ANDX request

      SMB_COM_LOGOFF_ANDX request

      SMB_COM_NEGOTIATE request

      SMB_COM_NT_CANCEL request

      SMB_COM_NT_CREATE_ANDX request

      SMB_COM_NT_RENAME request

      SMB_COM_NT_TRANSACT request

      SMB_COM_NT_TRANSACT subcommand request

      SMB_COM_OPEN request

      SMB_COM_OPEN_ANDX request

      SMB_COM_OPEN_PRINT_FILE request

      SMB_COM_PROCESS_EXIT request

      SMB_COM_QUERY_INFORMATION request

      SMB_COM_QUERY_INFORMATION_DISK request

      SMB_COM_QUERY_INFORMATION2 request

      SMB_COM_READ request

      SMB_COM_READ_ANDX request

      SMB_COM_READ_MPX request

      SMB_COM_READ_RAW request

      SMB_COM_RENAME request

      SMB_COM_SEARCH request

      SMB_COM_SEEK request

      SMB_COM_SESSION_SETUP_ANDX request

      SMB_COM_SET_INFORMATION request

      SMB_COM_SET_INFORMATION2 request

      SMB_COM_TRANSACTION request

      SMB_COM_TRANSACTION subcommand request

      SMB_COM_TRANSACTION2 request

      SMB_COM_TRANSACTION2 subcommand request

      SMB_COM_TREE_CONNECT request

      SMB_COM_TREE_CONNECT_ANDX request

      SMB_COM_TREE_DISCONNECT request

      SMB_COM_UNLOCK_BYTE_RANGE request

      SMB_COM_WRITE request

      SMB_COM_WRITE_AND_CLOSE request

      SMB_COM_WRITE_AND_UNLOCK request

      SMB_COM_WRITE_ANDX request

      SMB_COM_WRITE_MPX request

      SMB_COM_WRITE_PRINT_FILE request

      SMB_COM_WRITE_RAW request

Message signing example

Messages

   character sequences data type

   Common Data Types

   data buffer format codes

   file attributes data type

   information level

      codes

      overview

   Information Levels

   NT Transact subcommands

      NT_TRANSACT_CREATE (0x0001)

      NT_TRANSACT_IOCTL (0x0002)

      NT_TRANSACT_NOTIFY_CHANGE (0x0004)

      NT_TRANSACT_QUERY_SECURITY_DESC (0x0006)

      NT_TRANSACT_RENAME (0x0005)

      NT_TRANSACT_SET_SECURITY_DESC (0x0003)

   SMB

      commands

         SMB_COM_CHECK_DIRECTORY (0x10)

         SMB_COM_CLOSE (0x04)

         SMB_COM_CLOSE_AND_TREE_DISC (0x31)

         SMB_COM_CLOSE_PRINT_FILE (0xC2)

         SMB_COM_COPY (0x29)

         SMB_COM_CREATE (0x03)

         SMB_COM_CREATE_DIRECTORY (0x00)

         SMB_COM_CREATE_NEW (0x0F)

         SMB_COM_CREATE_TEMPORARY (0x0E)

         SMB_COM_DELETE (0x06)

         SMB_COM_DELETE_DIRECTORY (0x01)

         SMB_COM_ECHO (0x2B)

         SMB_COM_FIND (0x82)

         SMB_COM_FIND_CLOSE (0x84)

         SMB_COM_FIND_CLOSE2 (0x34)

         SMB_COM_FIND_NOTIFY_CLOSE (0x35)

         SMB_COM_FIND_UNIQUE (0x83)

         SMB_COM_FLUSH (0x05)

         SMB_COM_GET_PRINT_QUEUE (0xC3)

         SMB_COM_INVALID (0xFE)

         SMB_COM_IOCTL (0x27)

         SMB_COM_IOCTL_SECONDARY (0x28)

         SMB_COM_LOCK_AND_READ (0x13)

         SMB_COM_LOCK_BYTE_RANGE (0x0C)

         SMB_COM_LOCKING_ANDX (0x24)

         SMB_COM_LOGOFF_ANDX (0x74)

         SMB_COM_MOVE (0x2A)

         SMB_COM_NEGOTIATE (0x72)

         SMB_COM_NEW_FILE_SIZE (0x30)

         SMB_COM_NO_ANDX_COMMAND (0xFF)

         SMB_COM_NT_CANCEL (0xA4)

         SMB_COM_NT_CREATE_ANDX (0xA2)

         SMB_COM_NT_RENAME (0xA5)

         SMB_COM_NT_TRANSACT (0xA0)

         SMB_COM_NT_TRANSACT_SECONDARY (0xA1)

         SMB_COM_OPEN (0x02)

         SMB_COM_OPEN_ANDX (0x2D)

         SMB_COM_OPEN_PRINT_FILE (0xC0)

         SMB_COM_PROCESS_EXIT (0x11)

         SMB_COM_QUERY_INFORMATION (0x08)

         SMB_COM_QUERY_INFORMATION_DISK (0x80)

         SMB_COM_QUERY_INFORMATION2 (0x23)

         SMB_COM_QUERY_SERVER (0x21)

         SMB_COM_READ (0x0A)

         SMB_COM_READ_ANDX (0x2E)

         SMB_COM_READ_BULK (0xD8)

         SMB_COM_READ_MPX (0x1B)

         SMB_COM_READ_MPX_SECONDARY (0x1C)

         SMB_COM_READ_RAW (0x1A)

         SMB_COM_RENAME (0x07)

         SMB_COM_SEARCH (0x81)

         SMB_COM_SECURITY_PACKAGE_ANDX (0x7E)

         SMB_COM_SEEK (0x12)

         SMB_COM_SESSION_SETUP_ANDX (0x73)

         SMB_COM_SET_INFORMATION (0x09)

         SMB_COM_SET_INFORMATION2 (0x22)

         SMB_COM_TRANSACTION (0x25)

         SMB_COM_TRANSACTION_SECONDARY (0x26)

         SMB_COM_TRANSACTION2 (0x32)

         SMB_COM_TRANSACTION2_SECONDARY (0x33)

         SMB_COM_TREE_CONNECT (0x70)

         SMB_COM_TREE_CONNECT_ANDX (0x75)

         SMB_COM_TREE_DISCONNECT (0x71)

         SMB_COM_UNLOCK_BYTE_RANGE (0x0D)

         SMB_COM_WRITE (0x0B)

         SMB_COM_WRITE_AND_CLOSE (0x2C)

         SMB_COM_WRITE_AND_UNLOCK (0x14)

         SMB_COM_WRITE_ANDX (0x2F)

         SMB_COM_WRITE_BULK (0xD9)

         SMB_COM_WRITE_BULK_DATA (0xDA)

         SMB_COM_WRITE_COMPLETE (0x20)

         SMB_COM_WRITE_MPX (0x1E)

         SMB_COM_WRITE_MPX_SECONDARY (0x1F)

         SMB_COM_WRITE_PRINT_FILE (0xC1)

         SMB_COM_WRITE_RAW (0x1D)

      structure

         batched messages ("AndX" messages)

         data block

         overview

         parameter block

         SMB_Header

   SMB error classes and codes

   SMB Message Structure

   SMB_COM command codes

   SMB_ERROR data type

   SMB_NMPIPE_STATUS data type

   syntax

   time data type

   transaction subcommand codes

   Transaction Subcommands

      overview

      TRANS_CALL_NMPIPE (0x0054)

      TRANS_MAILSLOT_WRITE (0x0001)

      TRANS_PEEK_NMPIPE (0x0023)

      TRANS_QUERY_NMPIPE_INFO (0x0022)

      TRANS_QUERY_NMPIPE_STATE (0x0021)

      TRANS_RAW_READ_NMPIPE (0x0011)

      TRANS_RAW_WRITE_NMPIPE (0x0031)

      TRANS_READ_NMPIPE (0x0036)

      TRANS_SET_NMPIPE_STATE (0x0001)

      TRANS_TRANSACT_NMPIPE (0x0026)

      TRANS_WAIT_NMPIPE (0x0053)

      TRANS_WRITE_NMPIPE (0x0037)

   Transaction2 subcommands

      TRANS2_CREATE_DIRECTORY (0x000D)

      TRANS2_FIND_FIRST2 (0x0001)

      TRANS2_FIND_NEXT2 (0x0002)

      TRANS2_FIND_NOTIFY_FIRST (0x000B)

      TRANS2_FIND_NOTIFY_NEXT (0x000C)

      TRANS2_FSCTL (0x0009)

      TRANS2_GET_DFS_REFERRAL (0x0010)

      TRANS2_IOCTL2 (0x000A)

      TRANS2_OPEN2 (0x0000)

      TRANS2_QUERY_FILE_INFORMATION (0x0007)

      TRANS2_QUERY_FS_INFORMATION (0x0003)

      TRANS2_QUERY_PATH_INFORMATION (0x0005)

      TRANS2_REPORT_DFS_INCONSISTENCY (0x0011)

      TRANS2_SESSION_SETUP (0x000E)

      TRANS2_SET_FILE_INFORMATION (0x0008)

      TRANS2_SET_FS_INFORMATION (0x0004)

      TRANS2_SET_PATH_INFORMATION (0x0006)

   transport

      direct hosting

      direct IPX

      NetBIOS

         frames

         over

            IPX/SPX

            TCP/UDP

      NetBIOS-based transports

         other

         overview

      overview

      virtual circuits

   unique identifiers data type

MINUTES

MONTH

N

Negotiate and tree connect example

NetBIOS

   frames

   over

      IPX/SPX

      TCP/UDP

NetBIOS-based transports

   other

   overview

Normative references

NT Transact subcommands

   NT_TRANSACT_CREATE (0x0001)

   NT_TRANSACT_IOCTL (0x0002)

   NT_TRANSACT_NOTIFY_CHANGE (0x0004)

   NT_TRANSACT_QUERY_SECURITY_DESC (0x0006)

   NT_TRANSACT_RENAME (0x0005)

   NT_TRANSACT_SET_SECURITY_DESC (0x0003)

O

Other

Overview

Overview (synopsis)

P

Parameters - security index

Preconditions

Prerequisites

Product behavior

R

References

   informative

   normative

Relationship to other protocols

Request packet (section 2.2.4.2.1, section 2.2.4.3.1, section 2.2.4.4.1, section 2.2.4.5.1, section 2.2.4.6.1, section 2.2.4.7.1, section 2.2.4.8.1, section 2.2.4.9.1, section 2.2.4.10.1, section 2.2.4.11.1, section 2.2.4.12.1, section 2.2.4.13.1, section 2.2.4.14.1, section 2.2.4.15.1, section 2.2.4.16.1, section 2.2.4.17.1, section 2.2.4.18.1, section 2.2.4.19.1, section 2.2.4.20.1, section 2.2.4.21.1, section 2.2.4.22.1, section 2.2.4.23.1, section 2.2.4.25.1, section 2.2.4.26.1, section 2.2.4.30.1, section 2.2.4.31.1, section 2.2.4.32.1, section 2.2.4.33.1, section 2.2.4.34.1, section 2.2.4.35.1, section 2.2.4.39.1, section 2.2.4.40.1, section 2.2.4.41.1, section 2.2.4.42.1, section 2.2.4.43.1, section 2.2.4.46.1, section 2.2.4.47.1, section 2.2.4.48.1, section 2.2.4.50.1, section 2.2.4.51.1, section 2.2.4.52.1, section 2.2.4.53.1, section 2.2.4.54.1, section 2.2.4.55.1, section 2.2.4.57.1, section 2.2.4.58.1, section 2.2.4.59.1, section 2.2.4.60.1, section 2.2.4.61.1, section 2.2.4.62.1, section 2.2.4.63.1, section 2.2.4.64.1, section 2.2.4.65.1, section 2.2.4.66.1, section 2.2.4.67.1, section 2.2.4.68.1, section 2.2.4.69.1, section 2.2.5.1.1, section 2.2.5.4.1, section 2.2.5.6.1, section 2.2.5.7.1, section 2.2.5.9.1, section 2.2.5.11.1, section 2.2.6.8.1, section 2.2.6.9.1, section 2.2.7.1.1, section 2.2.7.2.1, section 2.2.7.3.1, section 2.2.7.4.1, section 2.2.7.6.1)

Response packet (section 2.2.4.2.2, section 2.2.4.3.2, section 2.2.4.4.2, section 2.2.4.5.2, section 2.2.4.6.2, section 2.2.4.7.2, section 2.2.4.8.2, section 2.2.4.9.2, section 2.2.4.10.2, section 2.2.4.11.2, section 2.2.4.12.2, section 2.2.4.13.2, section 2.2.4.14.2, section 2.2.4.15.2, section 2.2.4.16.2, section 2.2.4.17.2, section 2.2.4.18.2, section 2.2.4.19.2, section 2.2.4.20.2, section 2.2.4.21.2, section 2.2.4.23.2, section 2.2.4.26.2, section 2.2.4.30.2, section 2.2.4.31.2, section 2.2.4.32.2, section 2.2.4.33.2, section 2.2.4.35.2, section 2.2.4.39.2, section 2.2.4.40.2, section 2.2.4.41.2, section 2.2.4.42.2, section 2.2.4.43.2, section 2.2.4.46.2, section 2.2.4.48.2, section 2.2.4.50.2, section 2.2.4.51.2, section 2.2.4.52.2, section 2.2.4.53.2, section 2.2.4.54.2, section 2.2.4.55.2, section 2.2.4.57.2, section 2.2.4.58.2, section 2.2.4.59.2, section 2.2.4.60.2, section 2.2.4.61.2, section 2.2.4.62.2, section 2.2.4.64.2, section 2.2.4.66.2, section 2.2.4.67.2, section 2.2.4.68.2, section 2.2.4.69.2, section 2.2.5.2.2, section 2.2.5.3.2, section 2.2.5.4.2, section 2.2.5.5.2, section 2.2.5.6.2, section 2.2.5.7.2, section 2.2.5.8.2, section 2.2.5.9.2, section 2.2.5.11.2, section 2.2.6.3.2, section 2.2.6.7.2, section 2.2.6.9.2, section 2.2.6.14.2, section 2.2.7.1.2, section 2.2.7.2.2, section 2.2.7.4.2, section 2.2.7.6.2)

S

SECONDS

Security

   implementer considerations

   overview

   parameter index

Sequencing rules

   client

      algorithms for challenge/response authentication

      OpLock

         break notification

         grant

      receiving any message (section 3.1.5.1, section 3.2.5.1)

      RPC

         algorithms for challenge/response authentication

         overview

         receiving any message

      SMB_COM_CLOSE response

      SMB_COM_CREATE response

      SMB_COM_CREATE_NEW response

      SMB_COM_CREATE_TEMPORARY response

      SMB_COM_ECHO response

      SMB_COM_FIND response

      SMB_COM_FIND_CLOSE2 response

      SMB_COM_FIND_UNIQUE response

      SMB_COM_IOCTL response

      SMB_COM_LOCK_AND_READ response

      SMB_COM_LOGOFF_ANDX response

      SMB_COM_NEGOTIATE response

      SMB_COM_NT_CREATE_ANDX response

      SMB_COM_NT_TRANSACT response

      SMB_COM_NT_TRANSACT subcommand response

      SMB_COM_OPEN response

      SMB_COM_OPEN_ANDX response

      SMB_COM_OPEN_PRINT_FILE response

      SMB_COM_QUERY_INFORMATION response

      SMB_COM_QUERY_INFORMATION_DISK response

      SMB_COM_QUERY_INFORMATION2 response

      SMB_COM_READ response

      SMB_COM_READ_ANDX response

      SMB_COM_READ_MPX response

      SMB_COM_READ_RAW response

      SMB_COM_SEARCH response

      SMB_COM_SEEK response

      SMB_COM_SESSION_SETUP_ANDX response

      SMB_COM_TRANSACTION response

      SMB_COM_TRANSACTION subcommand response

      SMB_COM_TRANSACTION2 response

      SMB_COM_TRANSACTION2 subcommand response

      SMB_COM_TREE_CONNECT response

      SMB_COM_TREE_CONNECT_ANDX response

      SMB_COM_TREE_DISCONNECT response

      SMB_COM_WRITE response

      SMB_COM_WRITE_AND_CLOSE response

      SMB_COM_WRITE_AND_UNLOCK response

      SMB_COM_WRITE_ANDX response

      SMB_COM_WRITE_MPX response

      SMB_COM_WRITE_RAW response

      STATUS_PATH_NOT_COVERED

   server

      algorithms for challenge/response authentication

      incoming connection

      receiving any message (section 3.1.5.1, section 3.3.5.2)

      RPC

         algorithms for challenge/response authentication

         overview

         receiving any message

      SMB_COM_CHECK_DIRECTORY request

      SMB_COM_CLOSE request

      SMB_COM_CLOSE_PRINT_FILE request

      SMB_COM_CREATE request

      SMB_COM_CREATE_DIRECTORY request

      SMB_COM_CREATE_NEW request

      SMB_COM_CREATE_TEMPORARY request

      SMB_COM_DELETE request

      SMB_COM_DELETE_DIRECTORY request

      SMB_COM_ECHO request

      SMB_COM_FIND request

      SMB_COM_FIND_CLOSE request

      SMB_COM_FIND_CLOSE2 request

      SMB_COM_FIND_UNIQUE request

      SMB_COM_FLUSH request

      SMB_COM_IOCTL request

      SMB_COM_LOCK_AND_READ request

      SMB_COM_LOCK_BYTE_RANGE request

      SMB_COM_LOCKING_ANDX request

      SMB_COM_LOGOFF_ANDX request

      SMB_COM_NEGOTIATE request

      SMB_COM_NT_CANCEL request

      SMB_COM_NT_CREATE_ANDX request

      SMB_COM_NT_RENAME request

      SMB_COM_NT_TRANSACT request

      SMB_COM_NT_TRANSACT subcommand request

      SMB_COM_OPEN request

      SMB_COM_OPEN_ANDX request

      SMB_COM_OPEN_PRINT_FILE request

      SMB_COM_PROCESS_EXIT request

      SMB_COM_QUERY_INFORMATION request

      SMB_COM_QUERY_INFORMATION_DISK request

      SMB_COM_QUERY_INFORMATION2 request

      SMB_COM_READ request

      SMB_COM_READ_ANDX request

      SMB_COM_READ_MPX request

      SMB_COM_READ_RAW request

      SMB_COM_RENAME request

      SMB_COM_SEARCH request

      SMB_COM_SEEK request

      SMB_COM_SESSION_SETUP_ANDX request

      SMB_COM_SET_INFORMATION request

      SMB_COM_SET_INFORMATION2 request

      SMB_COM_TRANSACTION request

      SMB_COM_TRANSACTION subcommand request

      SMB_COM_TRANSACTION2 request

      SMB_COM_TRANSACTION2 subcommand request

      SMB_COM_TREE_CONNECT request

      SMB_COM_TREE_CONNECT_ANDX request

      SMB_COM_TREE_DISCONNECT request

      SMB_COM_UNLOCK_BYTE_RANGE request

      SMB_COM_WRITE request

      SMB_COM_WRITE_AND_CLOSE request

      SMB_COM_WRITE_AND_UNLOCK request

      SMB_COM_WRITE_ANDX request

      SMB_COM_WRITE_MPX request

      SMB_COM_WRITE_PRINT_FILE request

      SMB_COM_WRITE_RAW request

Server

   abstract data model

      global (section 3.1.1.1, section 3.3.1.1)

      overview (section 3.1.1, section 3.3.1)

      share

      SMB

         command - pending

         connection

         session

      tree connect

      unique

         open

         open search

   higher-layer triggered events

      client session

         security context

         session key

      configuration - updating

      DFS subsystem

         active

         DFS share

         not a DFS share

      disabling

      enabling

      open

         closing

         querying

      OpLock break

      pausing

      resuming

      sending any message (section 3.1.4.1, section 3.3.4.1)

      session

         closing

         querying

      share

         deregistering

         querying

         registering

         updating

      statistics

      transport binding change

      TreeConnect - querying

   initialization (section 3.1.3, section 3.3.3)

   local events

      disconnecting connection

      handling

         incoming transport connection

         transport disconnect

      overview

   message processing

      algorithms for challenge/response authentication

      incoming connection

      receiving any message (section 3.1.5.1, section 3.3.5.2)

      SMB_COM_CHECK_DIRECTORY request

      SMB_COM_CLOSE request

      SMB_COM_CLOSE_PRINT_FILE request

      SMB_COM_CREATE request

      SMB_COM_CREATE_DIRECTORY request

      SMB_COM_CREATE_NEW request

      SMB_COM_CREATE_TEMPORARY request

      SMB_COM_DELETE request

      SMB_COM_DELETE_DIRECTORY request

      SMB_COM_ECHO request

      SMB_COM_FIND request

      SMB_COM_FIND_CLOSE request

      SMB_COM_FIND_CLOSE2 request

      SMB_COM_FIND_UNIQUE request

      SMB_COM_FLUSH request

      SMB_COM_IOCTL request

      SMB_COM_LOCK_AND_READ request

      SMB_COM_LOCK_BYTE_RANGE request

      SMB_COM_LOCKING_ANDX request

      SMB_COM_LOGOFF_ANDX request

      SMB_COM_NEGOTIATE request

      SMB_COM_NT_CANCEL request

      SMB_COM_NT_CREATE_ANDX request

      SMB_COM_NT_RENAME request

      SMB_COM_NT_TRANSACT request

      SMB_COM_NT_TRANSACT subcommand request

      SMB_COM_OPEN request

      SMB_COM_OPEN_ANDX request

      SMB_COM_OPEN_PRINT_FILE request

      SMB_COM_PROCESS_EXIT request

      SMB_COM_QUERY_INFORMATION request

      SMB_COM_QUERY_INFORMATION_DISK request

      SMB_COM_QUERY_INFORMATION2 request

      SMB_COM_READ request

      SMB_COM_READ_ANDX request

      SMB_COM_READ_MPX request

      SMB_COM_READ_RAW request

      SMB_COM_RENAME request

      SMB_COM_SEARCH request

      SMB_COM_SEEK request

      SMB_COM_SESSION_SETUP_ANDX request

      SMB_COM_SET_INFORMATION request

      SMB_COM_SET_INFORMATION2 request

      SMB_COM_TRANSACTION request

      SMB_COM_TRANSACTION subcommand request

      SMB_COM_TRANSACTION2 request

      SMB_COM_TRANSACTION2 subcommand request

      SMB_COM_TREE_CONNECT request

      SMB_COM_TREE_CONNECT_ANDX request

      SMB_COM_TREE_DISCONNECT request

      SMB_COM_UNLOCK_BYTE_RANGE request

      SMB_COM_WRITE request

      SMB_COM_WRITE_AND_CLOSE request

      SMB_COM_WRITE_AND_UNLOCK request

      SMB_COM_WRITE_ANDX request

      SMB_COM_WRITE_MPX request

      SMB_COM_WRITE_PRINT_FILE request

      SMB_COM_WRITE_RAW request

   overview

   RPC

      abstract data model

         global

         overview (section 3.1.1, section 3.5.1)

      higher-layer triggered events

         named pipe

            closing its open

            waiting for clients to open

         security context

         sending any message

         session key

      initialization (section 3.1.3, section 3.5.3)

      local events (section 3.1.7, section 3.5.7)

      message processing

         algorithms for challenge/response authentication

         overview

         receiving any message

      overview

      sequencing rules

         algorithms for challenge/response authentication

         overview

         receiving any message

      timer events (section 3.1.6, section 3.5.6)

      timers (section 3.1.2, section 3.5.2)

   sequencing rules

      algorithms for challenge/response authentication

      incoming connection

      receiving any message (section 3.1.5.1, section 3.3.5.2)

      SMB_COM_CHECK_DIRECTORY request

      SMB_COM_CLOSE request

      SMB_COM_CLOSE_PRINT_FILE request

      SMB_COM_CREATE request

      SMB_COM_CREATE_DIRECTORY request

      SMB_COM_CREATE_NEW request

      SMB_COM_CREATE_TEMPORARY request

      SMB_COM_DELETE request

      SMB_COM_DELETE_DIRECTORY request

      SMB_COM_ECHO request

      SMB_COM_FIND request

      SMB_COM_FIND_CLOSE request

      SMB_COM_FIND_CLOSE2 request

      SMB_COM_FIND_UNIQUE request

      SMB_COM_FLUSH request

      SMB_COM_IOCTL request

      SMB_COM_LOCK_AND_READ request

      SMB_COM_LOCK_BYTE_RANGE request

      SMB_COM_LOCKING_ANDX request

      SMB_COM_LOGOFF_ANDX request

      SMB_COM_NEGOTIATE request

      SMB_COM_NT_CANCEL request

      SMB_COM_NT_CREATE_ANDX request

      SMB_COM_NT_RENAME request

      SMB_COM_NT_TRANSACT request

      SMB_COM_NT_TRANSACT subcommand request

      SMB_COM_OPEN request

      SMB_COM_OPEN_ANDX request

      SMB_COM_OPEN_PRINT_FILE request

      SMB_COM_PROCESS_EXIT request

      SMB_COM_QUERY_INFORMATION request

      SMB_COM_QUERY_INFORMATION_DISK request

      SMB_COM_QUERY_INFORMATION2 request

      SMB_COM_READ request

      SMB_COM_READ_ANDX request

      SMB_COM_READ_MPX request

      SMB_COM_READ_RAW request

      SMB_COM_RENAME request

      SMB_COM_SEARCH request

      SMB_COM_SEEK request

      SMB_COM_SESSION_SETUP_ANDX request

      SMB_COM_SET_INFORMATION request

      SMB_COM_SET_INFORMATION2 request

      SMB_COM_TRANSACTION request

      SMB_COM_TRANSACTION subcommand request

      SMB_COM_TRANSACTION2 request

      SMB_COM_TRANSACTION2 subcommand request

      SMB_COM_TREE_CONNECT request

      SMB_COM_TREE_CONNECT_ANDX request

      SMB_COM_TREE_DISCONNECT request

      SMB_COM_UNLOCK_BYTE_RANGE request

      SMB_COM_WRITE request

      SMB_COM_WRITE_AND_CLOSE request

      SMB_COM_WRITE_AND_UNLOCK request

      SMB_COM_WRITE_ANDX request

      SMB_COM_WRITE_MPX request

      SMB_COM_WRITE_PRINT_FILE request

      SMB_COM_WRITE_RAW request

   timer events

      idle connection

      OpLock break acknowledgment

      overview

      unused open search

   timers

Set file attributes example

SMB commands

   SMB_COM_CHECK_DIRECTORY (0x10)

   SMB_COM_CLOSE (0x04)

   SMB_COM_CLOSE_AND_TREE_DISC (0x31)

   SMB_COM_CLOSE_PRINT_FILE (0xC2)

   SMB_COM_COPY (0x29)

   SMB_COM_CREATE (0x03)

   SMB_COM_CREATE_DIRECTORY (0x00)

   SMB_COM_CREATE_NEW (0x0F)

   SMB_COM_CREATE_TEMPORARY (0x0E)

   SMB_COM_DELETE (0x06)

   SMB_COM_DELETE_DIRECTORY (0x01)

   SMB_COM_ECHO (0x2B)

   SMB_COM_FIND (0x82)

   SMB_COM_FIND_CLOSE (0x84)

   SMB_COM_FIND_CLOSE2 (0x34)

   SMB_COM_FIND_NOTIFY_CLOSE (0x35)

   SMB_COM_FIND_UNIQUE (0x83)

   SMB_COM_FLUSH (0x05)

   SMB_COM_GET_PRINT_QUEUE (0xC3)

   SMB_COM_INVALID (0xFE)

   SMB_COM_IOCTL (0x27)

   SMB_COM_IOCTL_SECONDARY (0x28)

   SMB_COM_LOCK_AND_READ (0x13)

   SMB_COM_LOCK_BYTE_RANGE (0x0C)

   SMB_COM_LOCKING_ANDX (0x24)

   SMB_COM_LOGOFF_ANDX (0x74)

   SMB_COM_MOVE (0x2A)

   SMB_COM_NEGOTIATE (0x72)

   SMB_COM_NEW_FILE_SIZE (0x30)

   SMB_COM_NO_ANDX_COMMAND (0xFF)

   SMB_COM_NT_CANCEL (0xA4)

   SMB_COM_NT_CREATE_ANDX (0xA2)

   SMB_COM_NT_RENAME (0xA5)

   SMB_COM_NT_TRANSACT (0xA0)

   SMB_COM_NT_TRANSACT_SECONDARY (0xA1)

   SMB_COM_OPEN (0x02)

   SMB_COM_OPEN_ANDX (0x2D)

   SMB_COM_OPEN_PRINT_FILE (0xC0)

   SMB_COM_PROCESS_EXIT (0x11)

   SMB_COM_QUERY_INFORMATION (0x08)

   SMB_COM_QUERY_INFORMATION_DISK (0x80)

   SMB_COM_QUERY_INFORMATION2 (0x23)

   SMB_COM_QUERY_SERVER (0x21)

   SMB_COM_READ (0x0A)

   SMB_COM_READ_ANDX (0x2E)

   SMB_COM_READ_BULK (0xD8)

   SMB_COM_READ_MPX (0x1B)

   SMB_COM_READ_MPX_SECONDARY (0x1C)

   SMB_COM_READ_RAW (0x1A)

   SMB_COM_RENAME (0x07)

   SMB_COM_SEARCH (0x81)

   SMB_COM_SECURITY_PACKAGE_ANDX (0x7E)

   SMB_COM_SEEK (0x12)

   SMB_COM_SESSION_SETUP_ANDX (0x73)

   SMB_COM_SET_INFORMATION (0x09)

   SMB_COM_SET_INFORMATION2 (0x22)

   SMB_COM_TRANSACTION (0x25)

   SMB_COM_TRANSACTION_SECONDARY (0x26)

   SMB_COM_TRANSACTION2 (0x32)

   SMB_COM_TRANSACTION2_SECONDARY (0x33)

   SMB_COM_TREE_CONNECT (0x70)

   SMB_COM_TREE_CONNECT_ANDX (0x75)

   SMB_COM_TREE_DISCONNECT (0x71)

   SMB_COM_UNLOCK_BYTE_RANGE (0x0D)

   SMB_COM_WRITE (0x0B)

   SMB_COM_WRITE_AND_CLOSE (0x2C)

   SMB_COM_WRITE_AND_UNLOCK (0x14)

   SMB_COM_WRITE_ANDX (0x2F)

   SMB_COM_WRITE_BULK (0xD9)

   SMB_COM_WRITE_BULK_DATA (0xDA)

   SMB_COM_WRITE_COMPLETE (0x20)

   SMB_COM_WRITE_MPX (0x1E)

   SMB_COM_WRITE_MPX_SECONDARY (0x1F)

   SMB_COM_WRITE_PRINT_FILE (0xC1)

   SMB_COM_WRITE_RAW (0x1D)

SMB message structure

   batched messages ("AndX" messages)

   data block

   overview

   parameter block

   SMB_Header

SMB Message Structure message

SMB_COM_CREATE_DIRECTORY_REQUEST packet

SMB_COM_CREATE_DIRECTORY_RESPONSE packet

SMB_Data packet

SMB_ERROR data type

SMB_ERROR packet

SMB_FEA packet

SMB_FEA_LIST packet

SMB_FILE_ATTRIBUTE_ARCHIVE

SMB_FILE_ATTRIBUTE_DIRECTORY

SMB_FILE_ATTRIBUTE_HIDDEN

SMB_FILE_ATTRIBUTE_NORMAL

SMB_FILE_ATTRIBUTE_READONLY

SMB_FILE_ATTRIBUTE_SYSTEM

SMB_FILE_ATTRIBUTE_VOLUME

SMB_FIND_FILE_BOTH_DIRECTORY_INFO packet

SMB_FIND_FILE_DIRECTORY_INFO packet

SMB_FIND_FILE_FULL_DIRECTORY_INFO packet

SMB_FIND_FILE_NAMES_INFO packet

SMB_GEA packet

SMB_GEA_LIST packet

SMB_Header packet

SMB_INFO_ALLOCATION packet

SMB_INFO_QUERY_ALL_EAS packet

SMB_INFO_QUERY_EA_SIZE packet (section 2.2.8.1.2, section 2.2.8.3.2)

SMB_INFO_QUERY_EAS_FROM_LIST packet (section 2.2.8.1.3, section 2.2.8.3.3)

SMB_INFO_SET_EAS packet

SMB_INFO_STANDARD packet (section 2.2.8.1.1, section 2.2.8.3.1, section 2.2.8.4.1)

SMB_INFO_VOLUME packet

SMB_NMPIPE_STATUS data type

SMB_Parameters packet

SMB_QUERY_FILE_ALL_INFO packet

SMB_QUERY_FILE_ALT_NAME_INFO packet

SMB_QUERY_FILE_BASIC_INFO packet

SMB_QUERY_FILE_COMRESSION_INFO packet

SMB_QUERY_FILE_EA_INFO packet

SMB_QUERY_FILE_NAME_INFO packet

SMB_QUERY_FILE_STANDARD_INFO packet

SMB_QUERY_FILE_STREAM_INFO packet

SMB_QUERY_FS_ATTRIBUTE_INFO packet

SMB_QUERY_FS_DEVICE_INFO packet

SMB_QUERY_FS_SIZE_INFO packet

SMB_QUERY_FS_VOLUME_INFO packet

SMB_SEARCH_ATTRIBUTE_ARCHIVE

SMB_SEARCH_ATTRIBUTE_DIRECTORY

SMB_SEARCH_ATTRIBUTE_HIDDEN

SMB_SEARCH_ATTRIBUTE_READONLY

SMB_SEARCH_ATTRIBUTE_SYSTEM

SMB_SET_FILE_ALLOCATION_INFO packet

SMB_SET_FILE_BASIC_INFO packet

SMB_SET_FILE_DISPOSITION_INFO packet

SMB_SET_FILE_END_OF_FILE_INFO packet

Standards assignments

Structures - SMB message

   batched messages ("AndX" messages)

   data block

   overview

   parameter block

   SMB_Header

Subcommand codes - transaction

Subcommands

   NT Transact

      NT_TRANSACT_CREATE (0x0001)

      NT_TRANSACT_IOCTL (0x0002)

      NT_TRANSACT_NOTIFY_CHANGE (0x0004)

      NT_TRANSACT_QUERY_SECURITY_DESC (0x0006)

      NT_TRANSACT_RENAME (0x0005)

      NT_TRANSACT_SET_SECURITY_DESC (0x0003)

   Transaction

      overview

      TRANS_CALL_NMPIPE (0x0054)

      TRANS_MAILSLOT_WRITE (0x0001)

      TRANS_PEEK_NMPIPE (0x0023)

      TRANS_QUERY_NMPIPE_INFO (0x0022)

      TRANS_QUERY_NMPIPE_STATE (0x0021)

      TRANS_RAW_READ_NMPIPE (0x0011)

      TRANS_RAW_WRITE_NMPIPE (0x0031)

      TRANS_READ_NMPIPE (0x0036)

      TRANS_SET_NMPIPE_STATE (0x0001)

      TRANS_TRANSACT_NMPIPE (0x0026)

      TRANS_WAIT_NMPIPE (0x0053)

      TRANS_WRITE_NMPIPE (0x0037)

   Transaction2

      TRANS2_CREATE_DIRECTORY (0x000D)

      TRANS2_FIND_FIRST2 (0x0001)

      TRANS2_FIND_NEXT2 (0x0002)

      TRANS2_FIND_NOTIFY_FIRST (0x000B)

      TRANS2_FIND_NOTIFY_NEXT (0x000C)

      TRANS2_FSCTL (0x0009)

      TRANS2_GET_DFS_REFERRAL (0x0010)

      TRANS2_IOCTL2 (0x000A)

      TRANS2_OPEN2 (0x0000)

      TRANS2_QUERY_FILE_INFORMATION (0x0007)

      TRANS2_QUERY_FS_INFORMATION (0x0003)

      TRANS2_QUERY_PATH_INFORMATION (0x0005)

      TRANS2_REPORT_DFS_INCONSISTENCY (0x0011)

      TRANS2_SESSION_SETUP (0x000E)

      TRANS2_SET_FILE_INFORMATION (0x0008)

      TRANS2_SET_FS_INFORMATION (0x0004)

      TRANS2_SET_PATH_INFORMATION (0x0006)

Syntax

T

Time data type

Timer events

   client

      overview

      request expiration

      RPC (section 3.1.6, section 3.4.6)

   server

      idle connection

      OpLock break acknowledgment

      overview

      RPC (section 3.1.6, section 3.5.6)

      unused open search

Timers

   client

      idle connection

      OpLock break acknowledgment

      overview

      request expiration

      RPC (section 3.1.2, section 3.4.2)

      unused open search

   server

      overview

      RPC (section 3.1.2, section 3.5.2)

Tracking changes

TRANS2_FIND_FIRST2_REQUEST packet

TRANS2_FIND_NEXT2_REQUEST packet

TRANS2_OPEN2_REQUEST packet

TRANS2_OPEN2_RESPONSE packet

Transaction subcommands

   overview

   TRANS_CALL_NMPIPE (0x0054)

   TRANS_MAILSLOT_WRITE (0x0001)

   TRANS_PEEK_NMPIPE (0x0023)

   TRANS_QUERY_NMPIPE_INFO (0x0022)

   TRANS_QUERY_NMPIPE_STATE (0x0021)

   TRANS_RAW_READ_NMPIPE (0x0011)

   TRANS_RAW_WRITE_NMPIPE (0x0031)

   TRANS_READ_NMPIPE (0x0036)

   TRANS_SET_NMPIPE_STATE (0x0001)

   TRANS_TRANSACT_NMPIPE (0x0026)

   TRANS_WAIT_NMPIPE (0x0053)

   TRANS_WRITE_NMPIPE (0x0037)

Transaction Subcommands message

Transaction2 subcommands

   TRANS2_CREATE_DIRECTORY (0x000D)

   TRANS2_FIND_FIRST2 (0x0001)

   TRANS2_FIND_NEXT2 (0x0002)

   TRANS2_FIND_NOTIFY_FIRST (0x000B)

   TRANS2_FIND_NOTIFY_NEXT (0x000C)

   TRANS2_FSCTL (0x0009)

   TRANS2_GET_DFS_REFERRAL (0x0010)

   TRANS2_IOCTL2 (0x000A)

   TRANS2_OPEN2 (0x0000)

   TRANS2_QUERY_FILE_INFORMATION (0x0007)

   TRANS2_QUERY_FS_INFORMATION (0x0003)

   TRANS2_QUERY_PATH_INFORMATION (0x0005)

   TRANS2_REPORT_DFS_INCONSISTENCY (0x0011)

   TRANS2_SESSION_SETUP (0x000E)

   TRANS2_SET_FILE_INFORMATION (0x0008)

   TRANS2_SET_FS_INFORMATION (0x0004)

   TRANS2_SET_PATH_INFORMATION (0x0006)

Transport

   NetBIOS

      frames

      over

         IPX/SPX

         TCP/UDP

   overview

Transports

   direct hosting

   direct IPX

   NetBIOS-based transports

      other

      overview

   virtual circuits

Triggered events

   client

      cryptographic session key - querying

      device

         reading

         writing

      DFS

         querying referrals

         subsystem active

      directory

         contents change notification

         creating

         deleting

         enumeration

         verifying path

      file

         attributes

            querying

            setting

         byte-range lock

         byte-range lock - release

         closing

         create or overwrite

         creating a hard link

         deleting

         flushing data

         opening an existing

         opportunistic lock

         print

         reading

         renaming

         seek to a location

         sending IOCTL

         system attributes - querying

         writing

      named pipe

         exchange (call)

         executing a transaction

         peeking at data

         querying

            handle state

            information

         reading (section 3.2.4.14, section 3.2.4.37)

         setting state

         waiting for availability

         writing (section 3.2.4.15, section 3.2.4.38)

      named RAP transaction

      number of opens on tree connect

      operations - canceling pending

      process exit notification

      RPC

         DFS referrals - querying

         extended DFS referral capability - querying

         named pipe

            closing

            opening

            reading

            transaction - issuing

            writing

         sending any message

         session

            initiating

            key - authenticated context

            terminating

         share connection - requesting

         tree disconnect - requesting

      security descriptors

         querying

         setting

      sending any message (section 3.1.4.1, section 3.2.4.1)

      share - connecting

      SMB session logoff

      transport layer connection - testing

      tree disconnect (unmount share)

   server

      client session

         security context

         session key

      configuration - updating

      DFS subsystem

         active

         DFS share

         not a DFS share

      disabling

      enabling

      open

         closing

         querying

      OpLock break

      pausing

      resuming

      RPC

         named pipe

            closing its open

            waiting for clients to open

         security context

         sending any message

         session key

      sending any message (section 3.1.4.1, section 3.3.4.1)

      session

         closing

         querying

      share

         deregistering

         querying

         registering

         updating

      statistics

      transport binding change

      TreeConnect - querying

U

Unique identifiers data type

V

Vendor-extensible fields

Versioning

Virtual circuits

Y

YEAR

Show: