2.2.8.1.4 SMB_FIND_FILE_DIRECTORY_INFO

This information level structure is used in TRANS2_FIND_FIRST2 (section 2.2.6.2) and TRANS2_FIND_NEXT2 (section 2.2.6.3) responses to return the following information for all files that match the request's search criteria:

  • 64-bit versions of creation, access, and last write timestamps

  • 64-bit version of file size

  • Extended file attributes

  • File name

     SMB_FIND_FILE_DIRECTORY_INFO[SearchCount]
       {
       ULONG             NextEntryOffset;
       ULONG             FileIndex;
       FILETIME          CreationTime;
       FILETIME          LastAccessTime;
       FILETIME          LastWriteTime;
       FILETIME          LastAttrChangeTime;
       LARGE_INTEGER     EndOfFile;
       LARGE_INTEGER     AllocationSize;
       SMB_EXT_FILE_ATTR ExtFileAttributes;
       ULONG             FileNameLength;
       UCHAR             FileName[];
       }
      
    

NextEntryOffset: (4 bytes): This field contains the offset, in bytes, from this entry in the list to the next entry in the list. If there are no additional entries the value MUST be zero (0x00000000).

FileIndex: (4 bytes): This field SHOULD<156> be set to zero when sent in a response and SHOULD be ignored when received by the client.

CreateTime: (8 bytes): This field contains the date and time when the file was created.

LastAccessTime: (8 bytes): This field contains the date and time when the file was last accessed.

LastWriteTime: (8 bytes): This field contains the date and time when data was last written to the file.

LastAttrChangeTime: (8 bytes): This field contains the date and time when the file attributes where last changed.

EndOfFile: (8 bytes): This field contains the offset, in bytes, to the start of the file to the first byte after the end of the file.

AllocationSize: (8 bytes): This field contains the file allocation size, in bytes. Usually, this value is a multiple of the sector or cluster size of the underlying physical device.

ExtFileAttributes: (4 bytes): This field contains the extended file attributes of the file, encoded as an SMB_EXT_FILE_ATTR (section 2.2.1.2.3) data type.

FileNameLength: (4 bytes): This field contains the length of the FileName field, in bytes.<157>

FileName: (variable): This field contains the name of the file.<158>

Show: