2.2.8.1.3 SMB_INFO_QUERY_EAS_FROM_LIST
This information level structure is used in TRANS2_FIND_FIRST2 (section 2.2.6.2) and TRANS2_FIND_NEXT2 (section 2.2.6.3) responses to return the SMB_INFO_QUERY_EA_SIZE data along with a specific list of EAs for all files that match the request's search criteria. The requested EAs are provided in the Trans2_Data block of the request.
-
SMB_INFO_QUERY_EAS_FROM_LIST[SearchCount] { ULONG ResumeKey (optional); SMB_DATE CreationDate; SMB_TIME CreationTime; SMB_DATE LastAccessDate; SMB_TIME LastAccessTime; SMB_DATE LastWriteDate; SMB_TIME LastWriteTime; ULONG FileDataSize; ULONG AllocationSize; SMB_FILE_ATTRIBUTES Attributes; SMB_FEA_LIST ExtendedAttributeList; UCHAR FileNameLength; UCHAR FileName[]; }
ResumeKey: (4 bytes): This field is optional. If the SMB_FIND_RETURN_RESUME_KEYS bit is set in the Flags field of the TRANS2_FIND_FIRST2 Request (section 2.2.6.2.1) parameters, this field MUST contain the server-generated resume key. The resume key MUST be supplied in subsequent TRANS2_FIND_NEXT2 Requests (section 2.2.6.3.1) to continue the search. If the SMB_FIND_RETURN_RESUME_KEYS bit is not set, the server MUST NOT include this field.
CreationDate: (2 bytes): This field contains the date when the file was created.
CreationTime: (2 bytes): This field contains the time when the file was created.
LastAccessDate: (2 bytes): This field contains the date when the file was last accessed.
LastAccessTime: (2 bytes): This field contains the time when the file was last accessed.
LastWriteDate: (2 bytes): This field contains the date when data was last written to the file.
LastWriteTime: (2 bytes): This field contains the time when data was last written to the file.
FileDataSize: (4 bytes): This field contains the file size, in filesystem allocation units.
AllocationSize: (4 bytes): This field contains the size of the filesystem allocation unit, in bytes.
Attributes: (2 bytes): This field contains the file attributes.
ExtendedAttributeList: (variable): A list of all of the extended attribute (EA) name/value pairs assigned to the file.
FileNameLength: (1 byte): This field contains the length of the FileName field, in bytes.<155>
FileName: (variable): This field contains the name of the file.<156>