SMB_Parameters { WordCount; Words { USHORT DialectIndex; UCHAR SecurityMode; USHORT MaxMpxCount; USHORT MaxNumberVcs; ULONG MaxBufferSize; ULONG MaxRawSize; ULONG SessionKey; Capabilities; FILETIME SystemTime; SHORT ServerTimeZone; UCHAR ChallengeLength; } } SMB_Data { USHORT ByteCount; Bytes { UCHAR Challenge[]; SMB_STRING DomainName[]; SMB_STRING ServerName[]; } } 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 SMB_Parameters (35 bytes) ... ... ... SMB_Data (variable) ... SMB_Parameters (35 bytes): 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 Words (34 bytes) ... ... ... (34 bytes): 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1
0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 WordCount Words ... ... WordCount (1 byte): The value of this field MUST be 0x04. Words (8 bytes): 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 AndXCommand AndXReserved AndXOffset Action SecurityBlobLength Action (2 bytes): A 16-bit field. The two lowest-order bits have been defined. Name and bitmask Meaning SMB_SETUP_GUEST 0x0001 If clear (0), then the user successfully authenticated and is logged in. If set (1), then authentication failed but the server has granted guest access; the user is logged in as a Guest. SMB_SETUP_USE_LANMAN_KEY 0x0002 This bit is not used with extended security and MUST be clear. The server's response does not specify whether the access granted is of type Anonymous. However, the security system can provide that information once authorization completes. SecurityBlobLength (2 This value MUST specify the length, in bytes, of the SecurityBlob that is contained within the response. SMB_Data (variable): 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 ByteCount (variable) ... ByteCount (2 bytes): If SMB_FLAGS2_UNICODE is set in the SMB_Header.Flags2 field, then this field MUST be greater than or equal to 0x0006. If SMB_FLAGS2_UNICODE is not set, then this field MUST be greater than or equal to 0x0003. (variable): 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1
FIND Information Level Extensions SMB_FIND_FILE_BOTH_DIRECTORY_INFO Extensions If the being executed is a request for the enumeration of available previous versions (section ), then the returned structure is identical to the structure that is specified in section 2.2.8.1.7. However, the fields have a slightly different definition. SMB_FIND_FILE_BOTH_DIRECTORY_INFO[SearchCount] { ULONG NextEntryOffset; ULONG FileIndex; FILETIME CreationTime; FILETIME LastAccessTime; FILETIME LastWriteTime; FILETIME LastChangeTime; LARGE_INTEGER EndOfFile; LARGE_INTEGER AllocationSize; SMB_EXT_FILE_ATTR ExtFileAttributes; ULONG FileNameLength; ULONG EaSize; ShortNameLength; UCHAR Reserved; WCHAR ShortName[12]; SMB_STRING FileName; } 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 NextEntryOffset FileIndex CreationTime ... LastAccessTime ... LastWriteTime ... LastChangeTime ... EndOfFile ...
Index _ 73 3 31 A Abstract data model client ( 97, 98) server ( 97, 117) Algorithms 26 26 26 18 C 19 178 Client abstract data model ( 97, 98) higher-layer triggered events ( 97, 100) initialization ( 97, 100) local events ( 98, 117) message processing ( 98, 112) 117 sequencing rules ( 98, 112) timer events ( 98, 117) timers ( 97, 99) Client details ( 97, 98) 26 D Data model - abstract client ( 97, 98) server ( 97, 117) 21 28 E 134 23 F 26 19 24 26 81 79 80 G 9 H Higher-layer triggered events client ( 97, 100) server ( 97, 119) I 157 157 89 15 Initialization client ( 97, 100) server ( 97, 119) 9 L Local events client ( 98, 117) server ( 98, 133) Message processing client ( 98, 112) server ( 98, 121) Messages 89 21 21 N 14 71 30 76 76 30 84 85 30 87 local events 117 133 16 P 157 18 18 158 Protocol Details 97